Sidee lagu ogaadaa dayacanka VestaCP 0-maalin?Dayactirka/Cusbooneysii & Amarada Cusbooneysii

VestaCPGuddiga xakamaynta waxa soo gaadhay ka faa'iidaysi 0-maalin ah:

• Warbixinaha hadda jira waxay muujinayaan baylahda VESTA API taasoo u oggolaanaysa in koodka loo fuliyo xidid ahaan.
• Mowjaddii ugu horreysay ayaa la sheegay inay dhacday Abriil 2018, 4.
• Serfarka caabuqan ayaa la helay, oo shaqaynaya Abriil 2018, 4 /usr/lib/libudev.so Bilow martigeliyaha fog ee DDoS.

Iyada oo ku saleysan indho-indheynta ilaa hadda, mar server-ku uu cudurku dhaco, waxaa loo isticmaalaa in lagu diro weerarrada DDoS.

Habka ogaanshaha nuglaanta

Sidee lagu ogaan karaa haddii uu ku dhacay VestaCP 0-day Trojan?

• Raac tillaabooyinka hoose si aad u aragto in server-kaagu uu cudurku qabo?

Tallaabada 1:Fadlan u gal server-kaaga xidid ahaan

Tallaabada 2:Gudaha /etc/cron.hourly Ka hubi faylka la yiraahdo "gcc.sh" ee ku jira galka ▼

cd /etc/cron.hourly 
ls -al

• Haddii faylku jiro, seerfarkaaga waa cudur.
• Haddii uu cudurku qaado, isla markiiba kaydi faylashaada iyo xog-ururinta, dib u rakib kaagaLinuxserver.
• Beddel xogta sirta ah iyo erayga sirta ah ee xididka serverka.

Cusbooneysii/Cusbooneysii amarrada guddiga VestaCP

• Haddii aanu jirin faylka "gcc.sh", waxay la macno tahay in aanu cudurka Trojan ku dhicin.
• Haddii aadan cudurka qabin, fadlan cusboonaysii (hagaji) nuglaanta guddiga VestaCP isla markaaba.

Tallaabada 1:Samee amarka soo socda si aad u aragto lambarka nooca ee guddiga VestaCP uu yahay ▼

v-list-sys-vesta-updates 

Tallaabada 2:Ku socodsii amarka soo socda si aad u cusboonaysiiso guddiga VestaCP▼

v-update-sys-vesta-all

Tallaabada 3:Dib u bilow VestaCP ▼

service vesta restart

Tallaabada 4:Dib u bilaw serverka ▼

reboot

Halkan waxaa ah casharro dheeraad ah oo ku saabsan qaybaha VestaCP ▼

Hagaajinta habka qaabaynta qaabka qaabaynta VestaCP phpfcgid daalka badan ee xusuusta 500

Ka dib markii adeegga WEB ee VestaCP uu doorto qaabka "phpfcgid", tiro badan oo ka mid ah hababka PHP-CGI waxay sababaan in xusuusta si dhakhso ah u daalato: saacado yar gudahood oo dib loo bilaabo server-ka, asal ahaan waxay ku jirtaa xaalad xasuus ah oo ku filan.Nidaamkii PHP-CGI ee hore ee aan shaqaynin ma ahayn...

Asalkii hore ee VestaCP 8083 deked https ma saxantahay?Ku rakib Tababarka Shahaadada SSL

Guddiga kontoroolka VestaCP waa mid sahlan oo sahlan in la isticmaalo: rakibidda guddiga kontoroolka VestaCP waxay si toos ah u rakibi kartaa shaqada amniga ee Aan Encrypt SSL shahaado, sidaas darteed aad ayay caan ugu yihiin xirfadlayaasha SEO ee ajnabiga ah.Waa maxay Aynu Sirinno? Aynu sir dhigno waa S...

Sida loo isticmaalo guddiga VestaCP?Ku rakib Xafiiska Boosta/Ku dar Domains-badan & Maamulka Faylka

VestaCP waa mid aad u fudud, laakiin awood badan oo hufan Linux web kontoroolka martigelinta.Sida caadiga ah, waxay ku rakibi doontaa nginx server, PHP, Mysql, server DNS iyo software kale oo ay tahay in uu maamulo server buuxa, kuwaas oo dhamaantood SEO ah.