1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

WARNING HOSTGATOR FAIL - Potential Secuirty Issues

Discussion in 'BlackHat Lounge' started by G-S-T, Aug 19, 2013.

  1. G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,831
    Likes Received:
    8,794
    Occupation:
    Full time IM
    Location:
    Heavy in the game
    Today Hostgator have been migrating to new hardware. Anyone who has a shared hostgator server needs to check their emails ASAP.

    They have moved everything over, but in the process of doing this, they have also restored all your deleted addon domains and FTP accounts associated with them.

    Thats right, they have restored all your old FTP accounts. So when that guy did that thing on your server 4 months ago and you deleted the temp FTP account you made for it... Well, he has access again.

    Check your servers.
     
    • Thanks Thanks x 14
  2. Goal Line Technology

    Goal Line Technology Senior Member

    Joined:
    Dec 30, 2011
    Messages:
    929
    Likes Received:
    2,157
    Thanks a million GST for this. WOW
     
  3. oozyluce

    oozyluce Regular Member

    Joined:
    Jan 26, 2013
    Messages:
    277
    Likes Received:
    231
    Occupation:
    IT Coordinator, Senior Network Administrator
    Location:
    http://www.gaben.tv/
    Home Page:
    So far none of my two accounts were subject to any migrations and all subdomains/deleted ftp accounts are still dissapeared.

    I'll keep watching it over a period of one week tough, because migrations don't usually happen in 24 hours
     
  4. Theodore

    Theodore Power Member

    Joined:
    Oct 13, 2009
    Messages:
    679
    Likes Received:
    266
    Thank you so much GST!! Hostgator are truly going down hill fast...
     
  5. The Scarlet Pimp

    The Scarlet Pimp Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 2, 2008
    Messages:
    787
    Likes Received:
    3,119
    Occupation:
    Chair moistener.
    Location:
    Cyberspace
    good thing i don't use ftp accounts.
     
    • Thanks Thanks x 2
  6. stevey09

    stevey09 Newbie

    Joined:
    Aug 17, 2013
    Messages:
    14
    Likes Received:
    14
    Occupation:
    SEO Consultant
    Location:
    no mans land
    They are going downhill after they were taken over by the new company.
     
  7. ShadeDream

    ShadeDream Elite Member

    Joined:
    Nov 27, 2008
    Messages:
    2,209
    Likes Received:
    5,230
    Location:
    He who laughs last, laughs longest.
    They were always shit.
     
  8. blackberry

    blackberry Power Member

    Joined:
    Apr 26, 2009
    Messages:
    675
    Likes Received:
    218
    Occupation:
    Making money
    Location:
    Planet Earth
    Thank goodness I left Hostgator in March 2013.
    (I left because EIG bought Hostgator and at the time of the takeover they had my site down for several days).

    Dont get me started on the bad and slow support during the ownership transfer.
     
  9. lanbo

    lanbo Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 23, 2009
    Messages:
    3,430
    Likes Received:
    594
    Home Page:
    Another slip up! This is the second time in one month.
     
  10. The Scarlet Pimp

    The Scarlet Pimp Jr. VIP Jr. VIP Premium Member

    Joined:
    Apr 2, 2008
    Messages:
    787
    Likes Received:
    3,119
    Occupation:
    Chair moistener.
    Location:
    Cyberspace
    start backing up your files.
     
  11. fmOzilla

    fmOzilla Power Member

    Joined:
    Nov 11, 2011
    Messages:
    714
    Likes Received:
    384
    Location:
    C:\Windows\System32
    I wish it happen with godaddy
     
  12. Cratos

    Cratos Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 16, 2012
    Messages:
    1,753
    Likes Received:
    1,095
    Gender:
    Male
    Occupation:
    SEO
    Location:
    Where The Elite SEOs Dwell
    Valiendo verga.


    GST always comes through informing the BHW crew.
     
  13. G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,831
    Likes Received:
    8,794
    Occupation:
    Full time IM
    Location:
    Heavy in the game
    What happened last time?
     
  14. Razvan

    Razvan Power Member

    Joined:
    Jun 1, 2009
    Messages:
    516
    Likes Received:
    289
    they were down for about 12 hours or so the last time about 3 weeks ago if I remember correctly , anyways , thinking of getting another hosting ,
     
  15. G-S-T

    G-S-T Executive VIP Jr. VIP

    Joined:
    Jan 20, 2011
    Messages:
    1,831
    Likes Received:
    8,794
    Occupation:
    Full time IM
    Location:
    Heavy in the game
    I use Amazon EC2 for anything serious, i just have 2 hostgator servers that i put throw away sites on, once i have finished with them, i delete them from the server. So when i log in to my cpanel and see 75 sites in there im like what the fuck...

    So i start deleting them and notice the message "Do you want to remove the FTP account associated with this account" ... Alarm bells ringing