Veille - Faut-il avoir peur des fantômes?

Je vous laisse lire et vous faire votre propre opinion. En tout cas, joli nom de faille. Avec un peu de mystère, de la faille qui date de très longtemps.....Bouuuuh, Bouuuh ça fait peur....

C'est un peu comme après avoir vu Paranormal Activity. Vous n'allez pas croire que les meubles bougent seuls, mais vous allez quand même vous assurer que les portes sont bien fermées.

;-))

'Ghost' flaws poses high risk to Linux distributions

http://news.hitb.org/content/ghost-flaws-poses-high-risk-linux-distributions
http://www.computerworld.com/article/2875780/ghost-flaws-poses-high-risk-to-linux-distributions.html

GHOST in the Linux Machine – CVE-2015-0235
http://www.tripwire.com/state-of-security/latest-security-news/ghost-in-the-linux-machine-cve-2015-0235/

GHOST Vulnerability and its Patch History
http://www.tripwire.com/state-of-security/vulnerability-management/ghost-vulnerability-and-its-patch-history/

Qualys Security Advisory CVE-2015-0235 - GHOST: glibc gethostbyname buffer overflow Jan 27 2015 04:35PM
http://www.securityfocus.com/archive/1/534555

En quelques lignes, ce qu'il faut retenir

• However, although the distribution of the vulnerability goes as far back as 2000, the vulnerability is not easily exploitable at this point

• The vulnerability has been patched (for the most part) in May of 2013, so most newer Linux builds have not been at risk.

• At this time, there are very few applications that are at risk of the vulnerability and no remote exploits.

• This could change, however, as groups are already digging into the vulnerability further, so it is important for organizations to identify vulnerable systems on their network and patch them promptly.

• Even though GHOST is not as critical as other widespread vulnerabilities we have seen, system administrators should still be checking their environment to understand their risk. [Comme d'habitude en fait alors......]