I'm not going to say what it is for those of you that don't know because it would be hell. However someone I know told me about it and it allows you to run any command as user Cpanel through any website on a Cpanel server.

Does anyone know if they have done anything about it yet? We have removed this certain script from all of our servers.

hm.. u could say wich script is.. otherwise we all are vulnerable?!? :(

You mean these vulnerabilities?

http://webhostingtalk.com/showthread.php?s=&threadid=114752

That's quite old :)

ahhh

that's old :)

btw.. anyone here knows when php4.3.1 will be available for cpanel?

Yes, that's it. Our reports are that they haven't removed it yet.

All fixes have been made and are in the changelog at cPanel.