welcome to netwrkspider

Wednesday, January 28, 2015

How to patch GHOST: glibc vulnerability (CVE-2015-0235) On Redha/Centos/Ubuntu Based Linux


The Linux GNU C Library (glibc) versions prior to 2.18 are vulnerable to remote code execution via a vulnerability in the gethostbyname function. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. Linux distributions employing glibc-2.18 and later are not affected.

US-CERT recommends users and administrators refer to their respective Linux or Unix-based OS vendor(s) for an appropriate patch if affected. Patches are available from Ubuntu (link is external) and Red Hat (link is external). The GNU C Library versions 2.18 and later are also available for experienced users and administrators to implement.



# How to check the vulnerabilities on server.

1 ) Download the code  : ghost_tester.c

2 ) Compile the code

      root@root:# gcc -o ghost ghost_tester.c
      root@root:# ./ghost  (  It'll gives an output i.e vulnerable or not vulnerable )

 
#How to patch the Ghost vulnerabilities.

1 ) For Redhat/Centos 5.x/6.x/7.x

yum clean all
yum update 


After Reboot :


2 ) Debian/ Ubuntu Linux

sudo apt-get clean
sudo apt-get update
sudo apt-get dist-upgrade


Note : Reboot your machine after successful update.


 


1 comment:

Salman Khan said...

SAP HANA can be a helpful in-memory explore assistance which blends SAP directories computer program with the pre-tuned webserver, sap hana training in bangalore memory space equipment, along with social networking electronics by means among the list of SAP computer systems . SAP is probably the major software packages manufacturer on this planet. The SAP HANA is created to assist to real-time wise in sap hana training in usa addition to transferable in motion.