0 Day Exploit, Linux Servers are Vulnerable

My site was shut down today for about six or seven hours. Brain Bucket runs on a server powered by Linux. A 0 day exploit has made it to the public resulting in our server being hacked. Any server running kernel version 2.6.17 to 2.6.24.1. I are exploitable. This affects thousands of servers worldwide.

If you want to read the article I wrote about it, you can at http://www.brainbucketmag.com/News/article/sid=3169.html. It's mostly geared towards my readers who are not usually tech savvy. But the security risk is real.

It's been a real pain in the azz to restore all of my sites, but I think I'm done.

If your site is running on a server with that kernel, you need to be in touch with your server's admin to fix the risk.

Mike

 

Thanks for the heads up Mike...checking into it now.

 

thanks for the info.
If you need any security help or want to identify this hacker just hit me up.
-Khaled

 

thank you!

 

This is a local exploit, not remote, correct?

 

CentOS Updates:

32-bit version:
http://lists.centos.org/pipermail/centos-announce/2008-February/014684.html

64-bit version:
http://lists.centos.org/pipermail/centos-announce/2008-February/014685.html

 

Thanks Mike, Let me check!