Back to Security Advisories
Security Advisory: DirectAdmin FTP Brute-Force Rate Limiting Bypass
This is a security release for AlmaLinux 8, AlmaLinux 9. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Low
DirectAdmin
AlmaLinux 8
AlmaLinux 9
CentOS 7
CloudLinux 8
CloudLinux 9
Debian 11
Debian 12
Ubuntu 20.04
Ubuntu 22.04
Affected Versions
DirectAdmin 1.671 and earlier
Patched Version
DirectAdmin 1.672
Default Update CMD
yum update -yFix Commands
AlmaLinux 9 / CloudLinux 9
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadCentOS 7 / CloudLinux 7
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadUbuntu 22.04 / Debian 12
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadWhat this means under a SharedLicense license
Your SharedLicense license itself is not affected — this is a change in AlmaLinux 8, AlmaLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
References
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System