SGIS news

GHOST vulnerability

A vulnerability has been identified in Linux that allows hackers to gain control of systems without the need for any passwords. You can read more on this here itworld.com/article/2876098/linux-hit-by-critical-security-hole.html.

If you run your own VPS or dedicated server then it’s important you check that your system isn’t vulnerable to avoid your server being hacked.

Shared hosting

If you use our shared hosting platform then there’s nothing you need to do as we have already taken the necessary steps to secure the servers.

VPS and Dedicated Servers

We’ve put together a quick guide to check for this vulnerability and fix it.

  1. 1Run system check

    Install the ‘ghost-checker’ file to your server by running the below commands:

    wget http://mirrors.uk.heg.com/ghost/ghost-checker
    chmod +x ghost-checker
    ./ghost-checker
    
  2. 2Fix system

    If the above check returns ‘VULNERABLE’ then you need to run an update on your server. If your server isn’t vulnerable then there’s nothing more you need to do.

    sudo yum clean all; sudo yum update glibc
    
  3. 3Reboot system

    After the above process has completed it’s important to reboot your machine to ensure all services restart without weaknesses.

If you have any questions regarding this issue please get in touch with our support team.