Recommendations for POODLE: SSLv3.0 vulnerability (CVE-2014-3566)

Posted on 3 February, 201518 August, 2017

RedyHost security team has been made aware of a vulnerability in the SSLv3.0 protocol, which has been assigned CVE-2014-3566. All implementations of SSLv3.0 are affected. What Is POODLE? POODLE stands for Padding Oracle On Downgraded Legacy Encryption. This vulnerability allows a man-in-the-middle attacker to decrypt ciphertext using a padding oracle side-channel attack. More details are available in the upstream OpenSSL advisory. Netscape originally developed Secure Sockets Layer (SSL) to be a means of protecting data as it was sent across a network. Version 1 was never released, and when SSLv2 came out in 1995, there were a number of flaws that made […]

Continue reading→

Security recommendations around the Heartbleed vulnerability

Posted on 3 February, 201518 August, 2017

On April 7, 2014 the OpenSSL Project released an update to address a critical vulnerability known as Heartbleed (CVE-2014-0160). This vulnerability, which affects multiple sites across the Internet, could be remotely exploited to leak sensitive information. Actions by RedyHost RedyHost has reviewed all of our sites and applications, and we have determined that the few of our sites, including the Client Area https://www.redyhost.com.au/cc/clientarea.php, cPanelhttps://my.redyhost.net.au:2083 were vulnerable to this issue. This has been patched immediately, and we have replaced our SSL certificates. Changing your password RedyHost has no evidence that any customer data (including user names and passwords) was exposed. However, if […]

Continue reading→

CentOS v4.x EOL February 2012

Posted on 3 February, 201518 August, 2017

This is a reminder that CentOS v4.x is EOL (End Of Life) as of 29th February 2012. This means that there will be no more OS updates, including security updates. We encourage all RedyHost customers running CeontOS v.4.x to migrate all accounts from such a server to one running at least CentOS v5, preferably CentOS v6, immediately: http://www.centos.org/modules/smartfaq/faq.php?faqid=42 If running cPanel, they will also stop supporting this platform as of August 31, 2012: http://cpanel.net/products/cpanelwhm/system-requirements.html We do not provide any support for servers running on an EOL OS, including all of our scripts and products.

Continue reading→