Like, zoinks! Linux Ghost Vulnerability

[DevilishBooster]

Like, zoinks!! A G-G-G-GHOST!!!!!

A vulnerability (and repair codes) has been discovered in all year 2000+ Linux operating systems that opens you up to hackers. 

"A critical vulnerability called GHOST has been found in glibc, the GNU C library, which affects all Linux systems dating back to 2000. Attackers can use this flaw to execute code and remotely gain control of Linux machines. The CVE code of GHOST is CVE-2015-0235."

http://www.cmcm.com/blog/en/security/2015-01-28/536.html

http://www.zdnet.com/article/critical-linux-security-hole-found/

http://www.pcworld.com/article/2876572/ghost-vulnerability-poses-high-risk-to-linux-distributions.html

[EmeraldKiwi]

Interesting...

(wtf does that mean)

[DevilishBooster]

Interesting...

(wtf does that mean)

From my understanding (which is admittedly very little since I am just starting with Linux systems) it means that it creates an extremely easy backdoor access into what ever device you have that is Linux based. Hopefully a much more experienced Linux user can clarify.

[Common_Courtesy]

Where is Scooby Doo and the mystery machine at?  

[EmeraldKiwi]

-snip-

Why does it exist? I mean, how come it wasn't found earlier? Get some super duper security hackers to test it all the time so this kind of thing doesn't happen anymore. Or at least it will be found faster instead of 5 years later when attackers have had time to take advantage of it.

[DevilishBooster]

Why does it exist? I mean, how come it wasn't found earlier? Get some super duper security hackers to test it all the time so this kind of thing doesn't happen anymore. Or at least it will be found faster instead of 5 years later when attackers have had time to take advantage of it.

It was found back in 2013 and fixed, but it wasn't recognized as a security risk until just now so most systems are still open to it.

"The bug first appeared in glibc in 2000. It actually was fixed on May 21, 2013, in between versions 2.17 and 2.18, Qualys CTO Wolfgang Kandek wrote in a blog post.

 

But at the time, the flaw wasn’t recognized as a security risk, Kandek wrote. Most stable and long-term support Linux distributions weren’t immediately modified, including Debian 7, Red Hat Enterprise Linux 6 and 7, CentOS 6 and 7 and Ubuntu 12.04."

[wpirobotbuilder]

Why does it exist? I mean, how come it wasn't found earlier? Get some super duper security hackers to test it all the time so this kind of thing doesn't happen anymore. Or at least it will be found faster instead of 5 years later when attackers have had time to take advantage of it.

Who will do it? If you're that super-duper of a security hacker, you won't have the time to test it all the time, you'll be busy with work and regular life. You also can't support yourself if you devote yourself full-time to the job, because it doesn't pay well.

[MEC-777]

It was found back in 2013 and fixed, but it wasn't recognized as a security risk until just now so most systems are still open to it.

"The bug first appeared in glibc in 2000. It actually was fixed on May 21, 2013, in between versions 2.17 and 2.18, Qualys CTO Wolfgang Kandek wrote in a blog post.

 

But at the time, the flaw wasn’t recognized as a security risk, Kandek wrote. Most stable and long-term support Linux distributions weren’t immediately modified, including Debian 7, Red Hat Enterprise Linux 6 and 7, CentOS 6 and 7 and Ubuntu 12.04."

 

So I'm guessing it's safe to assume this is not an issue (has been fixed) on all newer versions of those distributions listed? (ie: Ubuntu 14.04 etc.)

[DevilishBooster]

So I'm guessing it's safe to assume this is not an issue (has been fixed) on all newer versions of those distributions listed? (ie: Ubuntu 14.04 etc.)

The articles don't talk about v14.04 directly, but I would still check you system just in case because it says that most stable distributions were not immediately modified to correct the opening.

[techswede]

But.. I don't want to go back to windows.. Please be fixed on fedora 21 please be fixed on fedora 21 please be fixed on fedora 21... I do my banking on this machine

 

Oh

 

For users who use CentOS, Red Hat, Fedora, Scientific Linux etc. Please enter:

$ yum clean all && yum update

I hope that fixes it

[spartaman64]

so im on ubuntu 14.04 and it only lists ubuntu 12 im safe right

[DevilishBooster]

so im on ubuntu 14.04 and it only lists ubuntu 12 im safe right

I am not sure, but I don't think it affects 14.04. I am not really knowledgeable on Linux systems because I am just starting to look into using them. I would check to see if you use the glibc 2.2-2.17. Here is a quote from the first article.

"If you happen to be a geek who knows Linux very well, we suggest you enter these codes below ASAP to protect your system. Do not forget to restart your computer for the changes to take effect!

For users who use CentOS, Red Hat, Fedora, Scientific Linux etc. Please enter:

$ yum clean all && yum update

For users who use Debian, Ubuntu and other derived systems, please enter:

$ apt-get clean && apt-get update && apt-get upgrade

You can also update your system in the official GNU C Library website."

[DevilishBooster]

PHP Applications are vulnerable too:

 

http://threatpost.com/php-applications-wordpress-subject-to-ghost-glibc-vulnerability/110755

Thanks for the update!

[McMurderMonkey]

And I would have gotten away with it, if it weren't for you meddling kids!

 

On a serious note, this could mean a big scramble, considering the widespread use of Linux in everything.

[Blade of Grass]

And I would have gotten away with it, if it weren't for you meddling kids!

 

On a serious note, this could mean a big scramble, considering the widespread use of Linux in everything.

 

Even more serious if you take into account what I've posted above: PHP can be used to explore that vulnerability.

Keep in mind though, most servers have been patched, the issue is only servers that are not up to date in their patches (and since this is going on a year, those servers probably have other security issues to worry about).