Apache Struts 2 is an open-source framework widely used for developing Java web applications. On March 6, 2017, a critical security vulnerability identified as CVE-2017-5638 was publicly disclosed. This flaw allowed attackers to execute remote code on vulnerable servers by sending specially crafted malicious requests. The vulnerability occurs when a server processes file uploads using a Jakarta-based multipart parser. Attackers can exploit this weakness by embedding malicious commands within the Content-Type header of a file upload request. When processed by affected versions of Apache Struts 2, the server may execute these commands, leading to unauthorized access or complete system compromise. The issue specifically affects Apache Struts 2.3.x versions prior to 2.3.32 and 2.5.x versions prior to 2.5.10.1, where improper handling …
Technical Articles
HAProxy stands for High Availability Proxy. It is a very fast and reliable solution for high availability and load balancing. HAProxy is used as TCP/HTTP Load Balancer and for proxy Solutions. The HAProxy application will share the workload with multiple servers. Steps for Installation and Configuring HAProxy =========== Step 1: Before proceeding with the installation of HAProxy in the server, we need to install the epel repository on our system depending on the operating system version using the following command.
Cloud computing has transformed how businesses deploy and manage infrastructure. Instead of maintaining physical servers, organizations now rely on scalable cloud platforms that can dynamically allocate resources as demand changes. One of the most powerful open-source solutions enabling this transformation is OpenStack. What is OpenStack? OpenStack is an open-source cloud computing platform used to build and manage public and private clouds. It primarily delivers Infrastructure-as-a-Service (IaaS) capabilities, allowing organizations to: With OpenStack, administrators can spin up or shut down instances on demand, making it ideal for environments that require flexibility, automation, and scalability. Brief History of OpenStack OpenStack was launched in 2010 as a joint initiative between Rackspace Hosting and NASA. The project is now governed by the OpenStack Foundation …
A serious vulnerability named Dirty COW has been discovered recently which has put the Linux kernel under risk. It is said that this vulnerability was noticed nine years ago (since version 2.6.22 in 2007) and remained unnoticed throughout this time. A researcher named Phil Oester was the man behind the detection of this serious threat. According to him, the vulnerability is described as a race condition where the Linux kernel’s memory subsystem handles the copy-on-write (COW) breakage of private read-only memory mappings. In this way, the attackers gain write access to read-only memory updates and this paves the way to their increased privileges on the system.
A “Smart Host” (also known as a relay host) is a type of mail relay server which allows an SMTP server to route e-mail to an intermediate mail server rather than directly to the recipient’s server. This improves the performance of your server and the reliability of your e-mail delivery. Exim Server (Forwarding Server) This server will be forwarding all emails to the SmartHost for relay for final delivery. If you are not using cPanel / WHM, then you will simply edit ‘/etc/exim.conf’ instead of using cPanel / WHM’s interface. However, if the server is running cPanel / WHM you must edit the configuration file through the GUI as cPanel / WHM will revert your changes automatically over time.
CloudLinux is one of the widely used Operating System nowadays due to the high-level stability and advanced server security it provides, which makes it the first preference for hosting providers, especially in a shared hosting environment. LVE (Lightweight Virtual Environment) is a kernel-level technology developed by the CloudLinux team. It is lightweight and transparent. The goal of LVE is to make sure that no single website can bring down your web server. The kernel makes sure that all LVEs get a fair share of the server’s resources, and that no customer can use more than the limits set for that customer. Today we can limit CPU, Memory (virtual and physical), IO, number of processes as well as the number of …
The Network File System (NFS) was originally developed by SUN Micro-systems that allows communications between Linux/Unix systems. It allows you to mount your local file systems over a network and remote hosts or clients to interact with them as they are mounted locally on the same system. Benefits >> Central Data Management. >> Allows local access to remote files transparently. >> Very good for local or reliable connections Important NFS configuration file /etc/exports : All files and directories which need to be exported are defined in this which is located in server. Setup Need to have two CentOS systems : NFS Server NFS Client Server yum install nfs-utils nfs-utils-lib chkconfig –levels 235 nfs on service nfs start Here we are …
Security researchers identified a new OpenSSL vulnerability, called DROWN( Decrypting RSA with Obsolete and Weakened Encryption ) on March 2016. This attack was focused on servers that use the more secure TLS protocol, which also supports the obsolete SSLv2.This vulnerability allows an attacker to decrypt the highly secured TLS encrypted communication if the server houses SSLv2 cipher support. DROWN was assigned the CVE-2016-0800 id by the us-nert on the march (https://www.us-cert.gov/ncas/bulletins/SB16-067 ). More than 11 million websites that use TLS were vulnerable to DROWN attack. If your website is protected by TLS and your server directly on indirectly supports the older SSLv2, you are also vulnerable and an attacker may exploit it to get important information such as user names, …
Kibana: Complete Guide to Installation, Configuration, and Data Visualization
Kibana is an open-source analytics and visualization platform designed to work with Elasticsearch. It enables users to search, analyze, monitor, and visualize log and time-series data through interactive dashboards, charts, and graphs. Kibana acts as the visualization layer of the ELK Stack (Elasticsearch, Logstash, Kibana), allowing teams to transform raw machine data into meaningful insights. What is Kibana? Kibana is a web-based interface used for: It communicates directly with data stored in Elasticsearch indices and presents information visually using charts, maps, graphs, and dashboards. Kibana can be deployed: Prerequisites Before installing Kibana, ensure the following: Example cluster setup: 192.168.0.XX node1192.168.0.YY node2192.168.0.ZZ node3 All servers should communicate using both hostname and IP address. Installing Java Install OpenJDK: Verify installation: Installing Elasticsearch …
The Zend OpCache provides faster PHP execution through opcode caching and optimization. It improves PHP performance by storing precompiled script bytecode in the shared memory. Installing Zend OPCache on PHP 5.3 or 5.4 1. Login to SSH on your server 2. Type the following commands: #cd /usr/local/src #wget http://pecl.php.net/get/ZendOpcache # to get the latest (master) build do the following instead: