[cobalt-security] URGENT Hacking

["Mark Baker - Cobalt Lists" <cobalt@xxxxxxxxxxxxxxxxxx>]

Hi All,

We've just had an account hacked on our RaQ3, the person who did this claims
he got it from the log files just above the user name e.g. domain.com/~user
Apparently he got the FTP password from there, and used it to chance the
site e.t.c
He claims he used brute force, this is all i know so please help anyone out
there!!

Is this a known fault and when do cobalt expect to fix it?

Regards,

Mark Baker
Dark Marketing Ltd
http://www.yoursitehere.co.uk
------------------------------------------------------------------
Low cost Internet Solutions including Hosting,
Domain Registration and Design.
http://www.yoursitehere.co.uk | info@xxxxxxxxxxxxxxxxxx
------------------------------------------------------------------
FREE .co.uk with Unix hosting package 2 to 7 at
http://www.yoursitehere.co.uk !!
------------------------------------------------------------------