»

[inf8]

Am Montag bringt SWsoft Version 7 ihrer Domain-Management-Solution heraus.

Hier die offizielle Ankündigung:

SWsoft to Release Plesk 7 For Red Hat Operating Systems

SWsoft is pleased to pre-announce a limited release of Plesk 7 for Monday, February 9th, 2004 for the following Operating Systems:
Red Hat 7.3, 9.0
Red Hat Enterprise Linux 2.1 (AS/ES)
Red Hat Enterprise Linux 3 (AS/ES)

The release will be the second major release of the Plesk software since the acquisition by SWsoft last June. Plesk 7 will ship with a list of new features including a completely new easy to use, feature packed interface redesign, SpamAssassin the open source anti-spam software, a new subdomain manager, multi-level trouble ticketing system, and a new Plesk Application Vault delivering customizable point and click installation of pre-packaged applications.

SWsoft is pleased to offer a special promotion in this email. To take advantage of this Plesk 7 announcement for the Red Hat operating systems read below and contact sales@sw-soft.com to purchase your promo license keys. General Availability of the software will begin Monday, February 9th.

FreeBSD, Mandrake, SuSE, and Fedora builds of Plesk 7 are tentatively scheduled for General Availability later this month. A Windows build of Plesk 7 is scheduled for GA in March.

What will be new in Plesk 7

-> Interface Redesign
Plesk 7 will sport a completely new look and feel. Designed by specialists Plesk 7 is easier to learn, faster to use and manages more features than ever before.

-> Plesk Application Vault *
Plesk 7 will include a new customizable repository of Site Applications with the ability to add, deploy, configure, and remove applications to any domain on the system.

-> Subdomain Management Interface
Plesk 7 will provide users with an interface to create Subdomains inside their Primary domains, including FTP user assignment and scripting.

-> Multi-Level Support Trouble Ticketing System *
Plesk 7 will include a Multi-level Trouble-Ticketing System [integrated into the interface].

-> Spam Assassin Anti-SPAM Support Interface *
SpamAssassin Anti-Spam Software will be included in the base installation with a built in configuration interface for SPAM rules server wide or on a per mailbox basis.

-> Custom Buttons Management
Custom buttons can be created, managed and deleted in the redesigned Plesk interface.

-> ColdFusion Management Interface *
Plesk 7 will include an all new installation Interface for ColdFusion- Users can configure ColdFusion paths and enable/disable ColdFusion support in the Hosting setup.

-> Services Restart Optimization
Plesk 7 will provide additional optimization for its services restart mechanism. In addition to Apache multiple system services are now included in the optimization mechanism increasing system performance while limiting resource usage.

-> New @Domain support
In Plesk 7 Domain Users will be able to select multiple access points for webusers using a browser. New options include: (domain.com/~webuser or webuser@domain.com)

-> Enhanced Server Statistical Information
Plesk 7 will detail more server information than ever including an all new memory and HDD statistics represented in a completely new presentation format.

-> Site Builder Tools *
Plesk 7 will include a powerful CMS website building tool giving Domain users the ability to create and deploy websites as well as edit quickly and directly in WYSIWYG format their uploaded html pages.

-> Private Folder for Sensitive Data Storage
Plesk 7 will also include a new folder inside the domain root directory which cannot be accessed from the web. Domain users can now store sensitive data like a list of users, passwords etc. for personal access only.

-> Interface Session Manager with Simultaneous Login Management
Plesk 7 will include the ability for Users to allow/disallow simultaneous logins as well as view, manage and delete current sessions in the interface.

-> osCommerce Software Support
When released we will Include OS-Commerce Ecommerce software. Installed with the default Plesk 7 installation users can now quickly deploy and manage the open source ecommerce solution for their domain.

-> Redesigned Command Line Creation Utilities in PHP
The Plesk 7 installation will include a completely re-designed set of Command Line Creation Utilities. Written in PHP and simple to use these utilities allow the automated setup of accounts and act as an API for most billing programs. New functionality options include the ability to deploy subdomains (in the new subdomain manager) and domain deletion for enhanced external management of Plesk 7.

* (Optional Add-On Feature)

Screenshots:
Guggst du hier!

Ich persönlich bin sehr gespannt, was die neue Version so alles bringt. Glücklicherweise kann ich anscheinend endlich mein RH9 werfen (welches von RedHat leider nur noch mit Security-Patches beliefert wird) und zu Fedora wechseln. Im Plesk Forum habe ich jedoch auch schon was von Debian lesen können... das wäre natürlich endlich mal was anständiges!

Bis am 1. März gibts ein Spezialangebot: Plesk 7 + diverse Add-Ons für $396.

Für mehr Infos: http://www.plesk.com

Hat hier sonst noch jemand Freude an Plesk?


Gruss,
Hannes

[tao-bee]

scheint nicht alles völlig i.o. zu sein:

PLESK ermöglicht Ausspähen des Servers
Über eine Schwachstelle im web-basierten Konfigurationstool für Webserver und Webhosting PLESK ist es möglich, Verzeichnisse und Daten einzusehen. Ursache des Fehlers ist die unzureichende Filterung des Parameters file im Modul filemanager.php, sodass Directory Traversing möglich ist:
Die Lücke wurde zwar in PLESK 7.6 für Windows gefunden. Der Hersteller bestätigte die Lücke gegenüber heise Security auch für die Linux-Version 8.0. Ein Hotfix dafür soll am kommenden Montag, dem 2. Oktober, zum Download bereitgestellt werden. Einen Fix für Windows soll es nicht geben, da das Problem dort in der in Kürze erscheinenden Version 8.1. für Windows behoben sein soll.

Siehe dazu auch:
[PLESK 7.5 Reload] & [PLESK 7.6 for MS Windows] path passing and disclosure vulnerability, Fehlerbericht auf Bugtraq
(dab/c't)
Quelle: http://www.heise.de/security/news/meldung/78796