Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - Rajats

Pages: 1
1
Pre-Sales Questions / Re: 10% Discount Offer
« on: February 24, 2017, 01:08:22 PM »
Basically such offers restricted as per promotions but you have taken extra effort to take discount, therefore we can provide you 10% discount on all Dedicated servers. You can select any Dedicated server as per your requirement. As soon as your server setup completed, you can contact our technical support staff on live chat support or you can also open a ticket from your Billing section to migrate your hosting account from old server to new server and we will initiate the migration as per your scheduled time.

Please let me know, if you have any further queries.

2
Dedicated Servers / OPENSSH BUG: CLIENT INFORMATION LEAK DUE TO USE OF ROAMING CONNECTION FEATURE
« on: February 24, 2017, 08:50:50 AM »
The OpenSSH client is supports an undocumented/unknown feature called roaming:

If connection to SSH server breaks/stucked unexpectedly,
and if server supports roaming, then client is able to reconnect to the server and resume the suspended SSH session.

Roaming feature on OpenSSH clients contain a security flaw which allows a malicious SSH server to steal the client’s private keys.

To disable Roaming feature, refer following simple steps and secure your server.

To fix

Add the option ‘UseRoaming no’ in /etc/ssh/ssh_config file and restart ssh service with -oUseRoaming=no included on the ssh command line.

ie, echo ‘UseRoaming no’ >> /etc/ssh/ssh_config

or

sudo sh -c ‘echo UseRoaming \”no\” >> /etc/ssh/ssh_config’

It’s being reported that it effects only on Centos 7 servers and they can update OpenSSH using yum.

#yum update openssh

For more information read official Bug at Redhat Bugzilla

Pages: 1