Feeds

Red Hat Piranha ‘backdoor’ password discovered

Enables total control of a server

  • alert
  • submit to reddit

Secure remote control for conventional and virtual desktops

An undocumented backdoor password in the Red Hat Linux Piranha package containing Linux Virtual Server (LVS) software has been discovered by Allen Wilson of the X-Force department of security outfit Internet Security Systems. The backdoor password allows remote attackers to execute commands on a server, ISS says. If an affected version of Piranha is installed and the default backdoor password remains unchanged, any remote or local user may log in to the LVS Web interface. From there, LVS parameters can be changed and arbitrary commands can be executed with the same privilege as that of the Web server. The vulnerability is present even if the LVS service is not used, ISS warns. If the affected package is installed and the password has not been changed by the administrator from the pre-set login/pass combination "piranha" and "Q", the system is vulnerable. The current distribution of Red Hat Linux 6.2 is vulnerable. Earlier versions are not. Red Hat has provided an updated Piranha package, version 0.4.13-1, available here. Meanwhile, all the gruesome technical details of the ISS advisory are posted here. ®

New hybrid storage solutions

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.