TopSites Warning

**Kayla** · June 11th, 2007, 5:46 PM

In the past week there have been issues on several servers which point back to TopSites installations. TopSites is a popular site ranking script which you may be familiar with.

Even the website for TopSites seems to be suffering from attack, I am unable to connect successfully:

Quote:

Warning: mysql_connect() [function.mysql-connect]: Can't connect to local MySQL server through socket '/tmp/mysql.sock' (11) in /home/aardvark/public_html/index.php on line 5
Can't connect to local MySQL server through socket '/tmp/mysql.sock' (11)

The problem we see is that many different IPs (most are hijacked PCs located in Turkey, used as bot networks) are hammering these TopSites directories, acting as mini DoS attacks against those servers. The last security advisory for TopSites was last year, but apparently it remains unpatched. This does not give us much faith in the developers - it could have been fixed a long time ago, then we would not be dealing with this problem now.

The bottomline is that we are forced to disable the affected directories as we find them. We do recommend replacing this script with a similar one.
We are likely disabling TopSites in all Fantastico panels.

**Dan** · June 11th, 2007, 5:49 PM

Is it that people are sending tons of connections to the topsites to try to increase their ranking on them or just trying to bring down the topsites?

**Kayla** · June 11th, 2007, 5:59 PM

The bot networks are trying to access the directories to hack into the accounts since they still have the vulnerability from last year. http://secunia.com/advisories/19911
They are not going to get in due to our server configuration, but them trying is enough harm to Apache's stability.

**Neil** · June 11th, 2007, 6:25 PM

Could this result in CPU ratings clearing 17, mail refusing connections and servers such as Pass62 generally reacting very slowly?

**Kayla** · June 11th, 2007, 6:39 PM

On Pass62 specifically I do not see any requests for TopSites directories. What I do see is a few forums taking up some load.

**Neil** · June 11th, 2007, 7:08 PM

OK thanks.

**David** · June 12th, 2007, 1:32 AM

Actually, it's because my blog is listed on all of these, and people are just visiting a lot.

**panache** · June 15th, 2007, 3:59 PM

ok, here is my question on topsites, I am wondering which software you are talking about and is there a better topsites software then others that would follow more into what you are thinking about Kayla..

or you would rather not have any at all..

I have one, but it sits dead at the moment, I wont say the address here, but I will say it in a support ticket if need be...

I am curious as to which software is better or worse and which ones are not patched, or should I just can the idea...

thx

MJ

**Kayla** · June 15th, 2007, 6:15 PM

The one in question here, Aardvark TopSites is currently not patched.

I think it's one of the most popular scripts out there due to it being packed with Fantastico.. and since so many servers are equipped with cPanel.

As I browse around for different topsites scripts, it is pretty disappointing. Many are paid-only scripts (which means updates and support) but free ones are outdated.. such as:
http://www.evo-dev.com/products/evotopsites (2005)

I am looking towards the can here...

June 11th, 2007, 5:49 PM	#2 (permalink)
Dan Staff of Surpass Super #1 Joined in Apr 2007 2,744 posts Gave thanks: 152 Thanked 184 times	Is it that people are sending tons of connections to the topsites to try to increase their ranking on them or just trying to bring down the topsites? __________________ D4nz Net - Surpass Help Desk - NES Forever Use the thanks button. It works! AIM: dansorl

June 11th, 2007, 5:59 PM	#3 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	The bot networks are trying to access the directories to hack into the accounts since they still have the vulnerability from last year. http://secunia.com/advisories/19911 They are not going to get in due to our server configuration, but them trying is enough harm to Apache's stability. __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

June 11th, 2007, 6:25 PM	#4 (permalink)
Neil Surpass Fan On a golden path... Joined in Oct 2004 Lives in UK 361 posts Gave thanks: 6 Thanked 14 times	Could this result in CPU ratings clearing 17, mail refusing connections and servers such as Pass62 generally reacting very slowly? __________________ D17/D21/P59/P62/VPSX - "Faith can move mountains" (Faiths a big girl....) - I'm not paranoid, I know they are out to get me!

June 11th, 2007, 6:39 PM	#5 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	On Pass62 specifically I do not see any requests for TopSites directories. What I do see is a few forums taking up some load. __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

June 11th, 2007, 7:08 PM	#6 (permalink)
Neil Surpass Fan On a golden path... Joined in Oct 2004 Lives in UK 361 posts Gave thanks: 6 Thanked 14 times	OK thanks. __________________ D17/D21/P59/P62/VPSX - "Faith can move mountains" (Faiths a big girl....) - I'm not paranoid, I know they are out to get me!

June 15th, 2007, 3:59 PM	#8 (permalink)
panache Surpass Fan Excelling Contributor Joined in Dec 2005 Lives in my computer Hosted on pass86'd 660 posts Gave thanks: 56 Thanked 14 times	ok, here is my question on topsites, I am wondering which software you are talking about and is there a better topsites software then others that would follow more into what you are thinking about Kayla.. or you would rather not have any at all.. I have one, but it sits dead at the moment, I wont say the address here, but I will say it in a support ticket if need be... I am curious as to which software is better or worse and which ones are not patched, or should I just can the idea... thx MJ __________________

June 15th, 2007, 6:15 PM	#9 (permalink)
Kayla Marketing Maven Surpass Staff Joined in May 2003 Lives in Orlando 24,749 posts Gave thanks: 946 Thanked 806 times	The one in question here, Aardvark TopSites is currently not patched. I think it's one of the most popular scripts out there due to it being packed with Fantastico.. and since so many servers are equipped with cPanel. As I browse around for different topsites scripts, it is pretty disappointing. Many are paid-only scripts (which means updates and support) but free ones are outdated.. such as: http://www.evo-dev.com/products/evotopsites (2005) I am looking towards the can here... __________________ Follow Surpass on Twitter and Facebook Check out the Surpass Blog

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search