Problem with phishing sites and mail scripts

[buliwyf]

Hello,

We are running an Plesk 8.4 on a debian etch machine.
Since days we have problems with phishing sites and mailer scripts getting installed
in the httpdocs directory of various domain.
The problem even exists with vhosts which only contain a simple html file.
It seems to be a security Hole in plesk, but i don't find the creation
of the files and folders in the logfiles. If i try the updater in Control Panel
my plesk Version is up to date.

atm i have no idea to get rid of this. just checking file system very often.

 

[buliwyf]

Update: after disabling Horde nothing happend for hours.


1 Minute after my post i could find paypal phising files in one of our domains.

What other features are bound to the domain?
eg. webmail.example.com is disables
are there other subdomain?

 

[BalajiH]

Hello,
I am using the Parallels Plesk Panel version 9.3.0. In this i need a scripts for creating sub-domain. Please help me to resolve my issue.

Regards,
Balaji.V

 

[AttilaF]

Which version of Horde do you have on that server?