On September 24, 2014, a GNU Bash vulnerability, referred to as Shellshock or the “Bash Bug”, was disclosed. In short, the vulnerability allows remote attackers to execute arbitrary code given certain conditions, by passing strings of code following environment variable assignments. Because of Bash’s ubiquitous status amongst Linux, BSD, and Mac OS X distributions, many computers are vulnerable to Shellshock; all unpatched Bash versions between 1.14 through 4.3 (i.e. all releases until now) are at risk. The Shellshock vulnerability can be exploited on systems that are running Services or applications that allow unauthorised remote users to assign Bash environment variables. […]

On April 7, 2014 the OpenSSL Project released an update to address a critical vulnerability known as Heartbleed (CVE-2014-0160). This vulnerability, which affects multiple sites across the Internet, could be remotely exploited to leak sensitive information. Actions by RedyHost RedyHost has reviewed all of our sites and applications, and we have determined that the few of our sites, including the Client Area https://www.redyhost.com.au/cc/clientarea.php, cPanelhttps://my.redyhost.net.au:2083 were vulnerable to this issue. This has been patched immediately, and we have replaced our SSL certificates. Changing your password RedyHost has no evidence that any customer data (including user names and passwords) was exposed. However, if […]