Ungakubona kanjani ubungozi be-VestaCP 0-day?Lungisa/Thuthukisa & Vuselela Imiyalo

VestaCPIphaneli yokulawula ibhekana nokuxhashazwa kwezinsuku ezingu-0:

• Imibiko yamanje iveza ubungozi ku-VESTA API evumela ikhodi ukuthi isetshenziswe njenge-ROOT.
• Igagasi lokuqala kubikwa ukuthi lenzeka ngo-Ephreli 2018, 4.
• Kutholwe iseva ethelelekile, iyasebenza ngo-Ephreli 2018, 4 /usr/lib/libudev.so Qala umsingathi werimothi we-DDoS.

Ngokusekelwe ekuqaphelisweni kuze kube manje, uma iseva itheleleke, isetshenziselwa ukuthumela ukuhlaselwa kwe-DDoS.

Ukuthola ubungozi

Ungabona kanjani ukuthi utheleleke nge-VestaCP 0-day Trojan?

• Landela lezi zinyathelo ezingezansi ukuze ubone ukuthi iseva yakho ayinalo yini?

isinyathelo 1:Sicela ungene kuseva yakho njengempande.

isinyathelo 2:KW /etc/cron.hourly Hlola ifayela elinegama elithi "gcc.sh" kufolda ▼

cd /etc/cron.hourly 
ls -al

• Uma ifayela likhona, iseva yakho inegciwane.
• Uma uthelelekile, yenza ikhophi yasenqolobaneni yamafayela akho kanye nesizindalwazi ngokushesha, faka kabusha eyakhoLinuxiseva.
• Shintsha iphasiwedi egciniwe kanye nephasiwedi ye-ROOT yeseva.

Buyekeza/Thuthukisa Imiyalo Yephaneli yeVestaCP

• Uma lingekho ifayela elithi "gcc.sh", kusho ukuthi alithelelekile nge-Trojan.
• Uma ungenalo igciwane, sicela uthuthukise (ulungise) ukuba sengozini kwephaneli ye-VestaCP ngokushesha.

Isinyathelo sesi-1:Qalisa umyalo olandelayo ukuze ubone ukuthi iyiphi inombolo yenguqulo iphaneli ye-VestaCP engu-▼

v-list-sys-vesta-updates 

Isinyathelo sesi-2:Qalisa umyalo olandelayo ukuze ubuyekeze iphaneli ye-VestaCP▼

v-update-sys-vesta-all

Isinyathelo sesi-3:Qala kabusha i-VestaCP ▼

service vesta restart

Isinyathelo sesi-4:Qala kabusha iseva ▼

reboot

Nazi ezinye izifundo kumaphaneli e-VestaCP ▼

Ukuthuthukisa inqubo yokucushwa kwesifanekiso se-VestaCP phpfcgid amaphutha we-500 wokuqeda inkumbulo eminingi

Ngemuva kokuthi isevisi ye-WEB ye-VestaCP ikhethe ithempulethi ye-"phpfcgid", inombolo enkulu yezinqubo ze-PHP-CGI ibangela ukuba inkumbulo iphele ngokushesha: phakathi namahora ambalwa okuqalisa kabusha iseva, ngokuyisisekelo isesimweni sememori enganele.Inqubo ye-PHP-CGI eyayingenzi lutho ngaphambili yayinge...

Isizinda se-VestaCP 8083 port https asivumelekile?Faka Okokufundisa Kwesitifiketi Se-SSL

Iphaneli yokulawula ye-VestaCP ilula futhi kulula ukuyisebenzisa: ukufaka iphaneli yokulawula ye-VestaCP kungafaka ngokuzenzakalelayo umsebenzi wokuphepha wesitifiketi se-Let's Encrypt SSL, ngakho idume kakhulu phakathi kwabasebenzi be-SEO bakwamanye amazwe.Kuyini Asibhale Ngemfihlo? I-Let Encrypt iyi-S...

Ungayisebenzisa kanjani iphaneli yeVestaCP?Faka Ihhovisi Leposi/Engeza Izizinda Eziningi Nokuphathwa Kwefayela

I-VestaCP iyiphaneli yokulawula yokubamba iwebhu ye-Linux elula kakhulu, kodwa enamandla futhi ephumelelayo.Ngokuzenzakalelayo, izofaka iseva yewebhu ye-nginx, i-PHP, i-Mysql, iseva ye-DNS kanye nenye isofthiwe okufanele isebenzise iseva yewebhu egcwele, okuyi-SEO yonke...