Business ISP Claranet hit by Linux Security Flaw
Posted: 15th Feb, 2008 By: MarkJ
Hackers have exploited a security vulnerability in the Linux kernel, specifically the sys_vmsplice call that is responsible for virtual memory management, to gain root privileges within some of Claranets servers.
The UK business ISP first spotted the problem during Tuesday afternoon, although by then the hackers had already managed to replace their customers index.html (website) files with an unspecified message:
The situation, which is covered in more detail HERE (The Register), first appeared in version 2.6.17 of the Linux kernel and wasn't resolved until 2.6.23.
The UK business ISP first spotted the problem during Tuesday afternoon, although by then the hackers had already managed to replace their customers index.html (website) files with an unspecified message:
Claranet Statement: "Malicious activity related to the vulnerability was detected on Claranet's shared hosting platform. Within 10 minutes Claranet contained and halted the malicious activity, and locked down the platform to prevent further damage.
The shared hosting platform was fully patched with the vendor's updates by 10am on Wednesday. Less than one per cent of the total web sites hosted on the Claranet platform were affected and all were restored to their original states by 1pm on Wednesday 13 February"
The shared hosting platform was fully patched with the vendor's updates by 10am on Wednesday. Less than one per cent of the total web sites hosted on the Claranet platform were affected and all were restored to their original states by 1pm on Wednesday 13 February"
The situation, which is covered in more detail HERE (The Register), first appeared in version 2.6.17 of the Linux kernel and wasn't resolved until 2.6.23.
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
150,000+ Customers | View More ISPs
Cheapest ISPs for 100Mbps+
Modest Availability | View More ISPs
Latest UK ISP News
Cheap BIG ISPs for 100Mbps+
Large Availability | View All
Cheapest ISPs for 100Mbps+
Large Availability | View All
Helpful ISP Guides and Tips
Sponsored Links
The Top 15 Category Tags
- FTTP (5530)
- BT (3518)
- Politics (2542)
- Openreach (2298)
- Business (2266)
- Building Digital UK (2247)
- FTTC (2045)
- Mobile Broadband (1977)
- Statistics (1790)
- 4G (1668)
- Virgin Media (1621)
- Ofcom Regulation (1465)
- Fibre Optic (1396)
- Wireless Internet (1391)
- FTTH (1382)
Sponsored
Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms , Privacy and Cookie Policy , Links , Website Rules