文件: root - text - article - 2018 - 02 - linode-ubuntu17.10-man-in-the-middle-attack.txt
标签: 安全, 计算机攻击, 服务器, linux, man-in-the-middle-attack, security, linode, server, ubuntu, | 英文 | 主页 | 类别: 计算机科学 | 464 次阅读, 25052 次搜索 | 300 个单词
| 浏览 | 博客存档
![定阅此目录的博客 定阅此目录的博客](/images/form/rss.gif)
标签: 安全, 计算机攻击, 服务器, linux, man-in-the-middle-attack, security, linode, server, ubuntu, | 英文 | 主页 | 类别: 计算机科学 | 464 次阅读, 25052 次搜索 | 300 个单词
![定阅此目录的博客 定阅此目录的博客](/images/form/rss.gif)
We recently identified an issue with our Ubuntu 17.10 image which resulted in Linodes being created with the same SSH host keys. As a result of this, it is possible that an attacker could launch a man-in-the-middle (MITM) attack on your SSH sessions.
Any Ubuntu 17.10 Linode which was created between January 11 and February 22 is affected (other versions of Ubuntu are not affected). In addition to Linodes that were deployed during this time frame, images and backups that were taken of an affected system would also continue to have this issue present.
We recommend that you regenerate new SSH host keys using the procedure below as soon as possible to avoid the risk of a MITM attack.
How to remediate this issue on existing Linodes:
Please run the following commands as the root user:
rm -f /etc/ssh/ssh_host_*
dpkg-reconfigure openssh-server
systemctl restart ssh
On systems which you have previously already used to SSH to your Linode, you may receive warnings when running ssh after regenerating your keys. To resolve these warnings, run the following command on your client:
ssh-keygen -R servername.example.com
(Change “servername.example.com” to the IP address or hostname of your server.)
How we will prevent this going forward:
New automated validation checks have already been added to our image build process which will help ensure that we do not provide images with pre-generated host keys in the future.
We sincerely apologize for any issues that you've encountered or concern that has been caused as a result of this, and we want you to know that we take this very seriously. The changes to our build process will ensure that this is not repeated in the future. If you have any questions about this notification, please let us know.
Kind Regards,
Tim Kelso
Customer Support Manager
标签: 安全, 计算机攻击, 服务器, linux, man-in-the-middle-attack, security, linode, server, ubuntu, | 英文 | 主页 | 类别: 计算机科学 | 464 次阅读, 25052 次搜索 | 300 个单词 Any Ubuntu 17.10 Linode which was created between January 11 and February 22 is affected (other versions of Ubuntu are not affected). In addition to Linodes that were deployed during this time frame, images and backups that were taken of an affected system would also continue to have this issue present.
We recommend that you regenerate new SSH host keys using the procedure below as soon as possible to avoid the risk of a MITM attack.
How to remediate this issue on existing Linodes:
Please run the following commands as the root user:
rm -f /etc/ssh/ssh_host_*
dpkg-reconfigure openssh-server
systemctl restart ssh
On systems which you have previously already used to SSH to your Linode, you may receive warnings when running ssh after regenerating your keys. To resolve these warnings, run the following command on your client:
ssh-keygen -R servername.example.com
(Change “servername.example.com” to the IP address or hostname of your server.)
How we will prevent this going forward:
New automated validation checks have already been added to our image build process which will help ensure that we do not provide images with pre-generated host keys in the future.
We sincerely apologize for any issues that you've encountered or concern that has been caused as a result of this, and we want you to know that we take this very seriously. The changes to our build process will ensure that this is not repeated in the future. If you have any questions about this notification, please let us know.
Kind Regards,
Tim Kelso
Customer Support Manager
![定阅此目录的博客 定阅此目录的博客](/images/form/rss.gif)
猜您喜欢...
- Design Tic-Tac-Toe
- Daily Interview Problem: Arithmetic Binary Tree
- Daily Interview Problem: Group Words that are Anagrams
- Daily Interview Problem: Reverse Integer
- Autorun.inf Virus Protection
- Daily Interview Problem: Room scheduling
- Daily Interview Problem: Validate Binary Search Tree
- Daily Interview Problem: Deepest Node in a Binary Tree
- Algorithm Interview: Smallest Number that is not a Sum of a Subset of List
- ImageMagick Vulnerabilities - CVE-2016–3714
©2006~2024 牛排过熟 - 0.00732 秒 - 7676.344 KB/s - 250 在线
内存: 535.65 KB
18:54:01 up 13 days, 18:33, 2 users, load average: 0.98, 0.86, 0.73 - 服务器 PHP 版本号: 7.4.33
牛排怎么做才好吃? | <meta name="机器人" content="不索引, 跟踪" />
![](/images/top.jpg)
18:54:01 up 13 days, 18:33, 2 users, load average: 0.98, 0.86, 0.73 - 服务器 PHP 版本号: 7.4.33
读写完全 - 一般 - 最小 - 表格 - 所有评论 - 统计
当前页暂时没有评论。