Tag Archives: Debian

Debian Security Update – Apache2 – 04 Mar 2013

Several vulnerabilities have been found in the Apache HTTPD server.

  • CVE-2012-3499 The modules mod_info, mod_status, mod_imagemap, mod_ldap, and mod_proxy_ftp did not properly escape hostnames and URIs in HTML output, causing cross site scripting vulnerabilities.
  • CVE-2012-4558 Mod_proxy_balancer did not properly escape hostnames and URIs in its balancer-manager interface, causing a cross site scripting vulnerability.
  • CVE-2013-1048 Hayawardh Vijayakumar noticed that the apache2ctl script created the lock directory in an unsafe manner, allowing a local attacker to gain elevated privileges via a symlink attack. This is a Debian specific issue. Read More →

How to update to last kernel your debian 6 OVH box ?

I have a kimsufi Debian server on OVH.com and I want to update its Linux Debian kernel. As said on http://help.ovh.co.uk/KernelInstall, it is very easy.

You need to retrieve with a wget command the two last bzImage and System.map files from ftp://ftp.ovh.net/made-in-ovh/bzImage/latest-production specially adapted for OVH servers. You should use production releases as they are more stable that test releases, usually … Read More →

Nginx Update failed on debian

I had a little problem with Debian that didn’t want to restart after an update. Of course, no site were working.

I had this message log:

nginx created a new file : /etc/nginx/sites-available/default

I just renamed it to default.old so it takes mine instead of the default one and it works again !

Hope it helped you !