EMERGENCY PATCH FOR A 0 DAY EXPLOIT.

General help with installation, scripts, etc....

EMERGENCY PATCH FOR A 0 DAY EXPLOIT.

Postby tony » Mon Feb 11, 2008 5:11 pm

This patch was to address a root exploit on the new RH5 Kernel 2.6.17 - 2.6.24.1. More information here:

http://www.securityfocus.com/bid/27704/info

There were 2 servers that is running this kernel but has not been compromised:

cwh5
cpres3

We did an emergency patch on these servers this morning which took less than 30 mins. cpres3 had a little problem coming back up but it was resolved after a fsck was performed.

Many hosting companies have already reported being hacked which affected service to many customers. We seem to have adverted what could have been a very, very bad day!

Tony
tony
CWH Staff
 
Posts: 102
Joined: Wed Jan 26, 2005 11:38 am
Location: Vancouver, BC

Postby Forumtech » Tue Feb 12, 2008 10:17 am

Would this also cause some mbstring problems with PHP?

For some reason, I keep getting "Fatal error: Unknown function: mb_internal_encoding()" on one of my boards now. Since the string seem to be an old way for PHP to handle UTF-8 encoding, I was wondering if this is a result from the patching?

Other boards I'm running from my account dont seem to be affected.
* These are my thoughts, not yours. I'm only controlling the fate of my own actions, not yours. So dont follow my example if I jump off a bridge. :)
Forumtech
 
Posts: 3
Joined: Thu Jul 27, 2006 7:46 am
Location: Montreal, QC

Postby divya » Sat Mar 01, 2008 10:32 pm

Hello,

We have enabled mbstring module in the server.

Regards,
Divya
divya
 


Return to General Help

Who is online

Users browsing this forum: No registered users and 3 guests

cron