what to do about php cgi-telnet

[tkalfaoglu]

some moron has uploaded a cgi-telnet program.. one that can browse your server up and down using an interface like mc, and view files such as config.php for passwords. The fact that all hosts share the same group, psacln, makes it almost impossible to stop such programs from working -that is from crawling up from their own httpdocs..

Any ideas what to do to stop such programs?
I installed suphp, but I doubt it would be enough..

thanks, -turgut