Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have plesk 10.3.1 and I received following email from the Plesk admin

Parallels, the manufacturer and distributor of the Plesk Control Panel, has identified a SQL injection security vulnerability in some older versions of the control panel. This vulnerability is considered critical in nature and Parallels advises that you take action quickly.

Parallels released a "MicroUpdate" that makes patching this vulnerability easy. Please refer to the following Parallels Knowledge Base article for the MicroUpdate file as well as instructions and a complete list of affected control panel versions:

root@***:/# cat /root/.autoinstaller/microupdates.xml
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    <product id="plesk" version="10.3.1" installed-at="not-a-date-time">
        <patch version="17" timestamp="" installed-at="20120207T062525" />

I refered the document I got the follwoing solugion

 ... fixes are provided by the Micro-Updates listed below:
8.6.0 for Linux only MU#2 -
9.5.4  for Linux only MU#11 -
10.0.1 for Linux and Windows MU#13 -
10.1.1 for Linux and Windows MU#22 -
10.2.0 for Linux and Windows MU#16 -
10.3.1 for Linux and Windows MU#5 - KB is absent

Does it mean I have already update to latest version and I dont need to worry about the threat?? Please help me...

Thanks in advance..

share|improve this question

closed as off-topic by HopelessN00b Jan 14 '15 at 6:16

  • This question does not appear to be about server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

This question appears to be off-topic because it is about working with a service provider's management interface, such as cPanel. – HopelessN00b Jan 14 '15 at 6:16
up vote 0 down vote accepted

Judging by, you just need to run

# $PRODUCT_ROOT_D/admin/sbin/autoinstaller --select-product-id plesk --select-release-current --reinstall-patch --install-component base
share|improve this answer
Thanks ivan.. I saw the MU17 is installed and it is the latest for 10.3.1.. I read tat all the versions above MU#5 have fixed the problem...Please suggest me if I am wrong.. – Dilip Rajkumar Mar 4 '12 at 6:47
I would have run it once without caring about what is installed - it would install the latest patch that is available. Yes, 10.3.1 MU#17 should be later than MU#5 :^) and have the problem solved. – ivan_pozdeev Mar 6 '12 at 12:10
Thank you very much Ivan...:) – Dilip Rajkumar Mar 7 '12 at 4:20

Not the answer you're looking for? Browse other questions tagged or ask your own question.