Tenon iTools 8 Server Hacked (A1TS Ownz this Darwin 7.9.0 by S0l4r1s)

[Ex Machina <exmachina@xxxxxxxxx>]

My Tenon iTools 8 server has just been compromised. 
All my virtual websites display :
A1TS Ownz this Darwin 7.9.0 by S0l4r1s

See :
http://www.cybercafe.tv
http://www.singlefm.com
http://www.brice.org
http://p2pfoundation.net
http://www.brice.net
etc.

Seems they manage to write an index.html new files 
and deleted all index.php

I will restore all sites in a minute but any idea where 
I should look for security ?

-- 
Brice Le Blevennec, Digerati, ListDad, <http://www.brice.net> 
Emakina S.A. - The e-business Agency <http://www.emakina.com> 
Ex Machina Television S.P.R.L.- Television & Radio Production 
<http://www.cybercafe.tv> & <http://www.singlefm.com> 
Contact Office Group S.A. - The Professional Online Office 
<http://www.contactoffice.com>
---------
Tenon Intersystems' iTools Mailing List
To unsubscribe: send mail to
itools-request@xxxxxxxxxxxxxxx
with the body only containing:
unsubscribe
Find the searchable mailing list archives
at:
http://www.tenon.com/lists/html/iTools/