sehh
- Total activity 126
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 32
Posts
Recent activity by sehh-
TLS 1.2 - Questions
As of December 2015, there is a major push to disable EVERY SINGLE encryption that is less than TLS 1.2 (that includes TLS 1.1, TLS 1.0, all SSL versions). We've been contacted by our PCI represen...
-
ModSecurity blocks google analytics script tag
My application allows the user to use his own google-analytics script tag, which is stored in the application SQL database and used at the footer of the application/site. Unfortunately, I discover...
-
[Case 192121] Certificate bundle verification failed
I'm trying to install a wildcard certificate issued by CACERT.org, for all WHM/cpanel services (cPanel/WHM/Dovecot/Exim). I copy paste the CRT file, the KEY file and the Class 3 bundle. I see all ...
-
upgrade to 5.6 - percona conflict
I have a new CentOS 6.6 server, with the latest cpanel/whm installed. I tried to upgrade to MySQL 5.6 from WHM's option "MySQL/MariaDB Upgrade", but this procedure fails because the new rpms confl...
-
Manage Service SSL Certificates Issue
I found an interesting bug. If I try to upload/install a wildcard domain certificate (*.domain.com) then the "Manage Service SSL Certificates" dies and can no longer be accessed. It produces the fo...
-
Apache logs & reverse IP address lookup
Hello, A few days ago, I noticed that my apache logs had domain names instead of IP addresses, for example: msnbot-157-55-39-11.search.msn.com - - [08/Apr/2015:01:07:39 +0100] "GET /file.html HT...
-
requests with bash/curl in the browser signature
I see an increase in these types of attacks, requests with a bash execution of curl, which executes a remote piece of code. My question is, which application is vulnerable to this attack? somethin...
-
LibXML.xs:1493: error
Last week, after a typical daily update, upcp started failing with: [20141012.235520] [5834] LibXML.xs:1493: error: syntax error before "reader" [20141012.235520] [5834] LibXML.xs: In f...
-
CVE-2014-2532 and CVE-2014-2653
Hello, I'm failing PCI validation due to these vulnerabilities: CVE-2014-2532 and CVE-2014-2653 I looked at the rpm changelog of openssh-server but can't find any mention of them. Do these vulne...
-
Rare case of SA that fails to scan properly
In a few rare cases, I've seen SpamAssassin allow some spam to go through with the following headers: X-Spam-Status: No, score= X-Spam-Score: X-Spam-Bar: X-Ham-Report: X-Spam-Flag: NO Anyone...