Security Advisory: DirectAdmin FTP Brute-Force Rate Limiting Bypass
A rate-limiting bypass affecting FTP authentication on DirectAdmin servers is fixed in this security release: brute-force protections could be evaded, weakening the first line of defense for FTP credentials. Update the DirectAdmin FTP stack and keep complementary protections enabled.
Etkilenen Sürümler
DirectAdmin 1.671 and earlier
Yamalanmış Sürüm
DirectAdmin 1.672
Varsayılan Güncelleme Komutu
yum update -yDüzeltme Komutları
AlmaLinux 9 / CloudLinux 9
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadCentOS 7 / CloudLinux 7
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadUbuntu 22.04 / Debian 12
cd /usr/local/directadmin
echo 'action=update&value=current' >> data/task.queue
directadmin --reloadSharedLicense lisansı altında bunun anlamı
Your SharedLicense license itself is not affected — this is a change in AlmaLinux 8, AlmaLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
What happened
Rate limiting is what turns an FTP brute-force attempt from feasible into impractical. The flaw let an attacker evade those counters — cycling connections so each new attempt looked fresh — which restores the attacker’s math advantage against weak or reused passwords.
Who is affected
DirectAdmin servers offering FTP access, particularly accounts whose users connect with simple passwords.
How to apply the fix
- Update DirectAdmin and the FTP server (ProFTPd or Pure-FTPd) via CustomBuild.
- Keep fail2ban-style blocking active for authentication services.
- Encourage or enforce stronger FTP credentials on hosted accounts.
For SharedLicense customers
Licensing is unaffected. This is a low-severity fix, but it stacks with good password policy — patch it during the regular cycle.
Sıkça Sorulan Sorular
Why does a rate-limiting bypass matter?
What should I change besides the update?
Is this urgent?
Referanslar
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin