HostingWorldNews » News

Attack On a Significant Flaw In Apache Released

admin — Fri, 19 Jun 2009 16:53:20 +0000

Zerimar points out that a significant flaw in Apache that can lead to a fairly trivial DoS attack is in the wild. Apache 1.x, 2.x, dhttpd, GoAhead WebServer, and Squid are confirmed vulnerable, while IIS6.0, IIS7.0, and lighttpd are confirmed not vulnerable. As of this writing, Apache Foundation does not have a patch available. From Rsnake’s introduction to the attack tool:

phpMyAdmin 3.0.0

admin — Sat, 11 Oct 2008 07:01:04 +0000

Requirements for 3.0.0:

PHP 5.2+, MySQL 5.0+; refer to Documentation.html for required PHP extensions

Improvements for 3.0.0:

+ [table] support MySQL 5.1 PARTITION: CREATE TABLE / Table structure,
  partition maintenance
+ [privileges] support for EVENT and TRIGGER
+ [gui] Events
   * minimal support on db structure page
   * export
+ [engines] Maria support
+ [engines] MyISAM and InnoDB: support ROW_FORMAT table option
+ [engines] PBXT: table options, foreign key (relation view, designer)
+ [error handler] NEW handle errors to prevent path disclosure
   and display/collect errors
+ [mysqlnd] do not display strMysqlLibDiffersServerVersion
  if the client is mysqlnd
+ [webapp] experimental Mozilla Prism support
+ [export] new plugin "codegen" for NHibernate
+ [export] new export to Texy! markup
+ [config] new parameter CheckConfigurationPermissions
+ [config] new parameter ShowDatabasesCommand
+ [config] new parameter CountTables
+ rfe #1775288 [transformation] proper display if IP-address
  stored as INT
+ rfe #1758177 [core] Add the Geometry DataTypes
+ rfe #1741101, patch #1798184 UUID default for CHAR(36) PRIMARY KEY
+ rfe #1840165 [interface] Enlarge column name field in vertical mode
+ patch #1847534 [interface] New "Inside field" in db search
+ [GUI] Mootools js library (http://mootools.net) and new parameter
  InitialSlidersState
* [core] cache some MySQL stats (do not query them with every
  page request)
+ [view] clearer dialog WITH (CASCADED | LOCAL) CHECK OPTION
+ [pdf] Merged tcpdf 2.2.002 (PHP5 version)
+ prevent search indexes from indexing phpMyAdmin installations
+ [lang] New Bangla
+ [interface] Display options
+ rfe #1962383 [designer] Option to create a PDF page
+ [GUI] Color picker
+ [navi] new parameter LeftDefaultTabTable
+ [display] headwords for sorted column
+ rfe #1692928 [transformation] Option to disable browser
  transformations
+ [import] Speed optimization to be able to import the sakila database
+ [doc] Documentation for distributing phpMyAdmin in README.VENDOR.

Fixes for 3.0.0.x:

- bug #1910621 [display] part 2: do not display a BINARY content
  as text
- [export] properly handle line breaks for YAML
- bug #1664240 [GUI] css height makes cfg TextareaRows useless
- bug #1724217 [Create PHP Code] doesn't include newlines for
  text fields
- bug #1845605 [i18n] translators.html still uses iso-8859-1
- bug #1823018 [charset] Edit(Delete) img-links pointing to wrong row
- bug #1826205 [export] Problems with yaml text export
- bug #1344768 [database] create/alter table new field can not have
  empty string as default
- patch #2007196, Typos in comments
- bug #1982315 [GUI] Comma and quote in ENUM
- bug #1970836 [parser] SQL parser is slow
- bug #2033962 [import] Cannot import zip file
- [core] Safer handling of temporary files with open_basedir
- bug #2066923 [display] Navi browse icon does not go to page 1
- patch #2075263 [auth] Single sign-on and cookie clearing
- bug #2080963 [charset] Clarify doc and improved code
- bug [charset] Cannot sort twice on a column when the table name
  contains accents
- bug #2113848 [navi] Page number after database switching
- patch #2115966 [GUI] Checkboxes and IE 7
- bug #114066 [core] ForceSSL generates incorrectly escaped
  redirections

[Dovecot-news] v1.1.4 released

admin — Sat, 11 Oct 2008 05:56:00 +0000

http://dovecot.org/releases/1.1/dovecot-1.1.4.tar.gz
http://dovecot.org/releases/1.1/dovecot-1.1.4.tar.gz.sig

	- SORT: Yet another assert-crashfix when renumbering index sort IDs.
	- ACL plugin fixes: Negative rights were actually treated as positive
	  rights. 'k' right didn't prevent creating parent/child/child mailbox.
	  ACL groups weren't working.
	- Maildir++ quota: Fixes to rebuilding when quota limit wasn't
	  specified in Dovecot (0 limit or limit read from maildirsize).
	- mbox: Several bugfixes causing errors and crashes.
	- Several fixes to expire plugin / expire-tool.
	- lock_method=dotlock could have deadlocked with itself.
	- Many error handling fixes and log message improvements.

HostingCon 2008 Wraps Up Today

admin — Wed, 30 Jul 2008 18:08:12 +0000

In its final year of planning the event, Interjuncture (interjuncture.com) hosts the final day of the hosted services industry’s largest conference and trade show, HostingCon 2008 (hostingcon.com), from Chicago’s Navy Pier.

iNET Interactive (inetinteractive.com), which acquired HostingCon earlier this month, will take full control in planning the event from here on out, starting with HostingCon 2009.

The day begins with a keynote presentation entitled “Sealing the Deal,” moderated by David Snead, an attorney and fellow WHIR writer, as well as feature a panel of experts which includes HostMySite.com CSO Lou Honick, DH Capital managing director Paul Stapleton, and Cheval Capital president Francis Stiff.

DemoWolf acquires competitors OnlyDemos.com and CheapDemos.com

admin — Mon, 28 Jul 2008 10:19:46 +0000

(Nova Scotia, Canada) – DemoWolf (www.demowolf.com) has made two significant acquisitions this week, acquiring competitors OnlyDemos.com and CheapDemos.com, in two separate transactions. The acquisition of these two brands will help solidify DemoWolf as the market leader in providing branded tutorials to the hosting industry.

As is the case with DemoWolf, OnlyDemos.com (www.onlydemos.com) produces flash support tutorials for the hosting industry. Established in 2003, OnlyDemos has a library of over 300 hosting tutorials that can be branded for any hosting company. Available tutorials include cPanel/WHM, H-Sphere, Ensim, RVskin, ModernBill, WHMAutoPilot, FTP, DNS, Fantastico, and PerlDesk tutorials, as well as tutorials in Spanish and Dutch.

CheapDemos.com (www.cheapdemos.com) also produces flash support tutorials for the hosting industry, and was established in 2003 as well. The CheapDemos tutorials library includes over 350 hosting tutorials, including cPanel/WHM (many themes), H-Sphere, Helm, Plesk, RVskin, Direct Admin, WHMAutoPilot, AWBS/DRAMS, FTP, DNS, Email, Fantastico, Whois.Cart, and Mailenable tutorials, as well as several series in Spanish.

OnlyDemos and CheapDemos typically sell branded tutorials for less than DemoWolf, but the quality of their tutorials admittedly is not as high as DemoWolf tutorials. Therefore, OnlyDemos and CheapDemos will continue to operate as separate companies, providing a cheaper alternative to DemoWolf tutorials… rather than DemoWolf adding their tutorial series to their own inventory. Customers will now have the option of choosing the market-leading quality of DemoWolf tutorials including their cornerstone “Voice Tutorials”, or they’ll be able to choose a lower quality but cheaper solution at either OnlyDemos.com or CheapDemos.com.

In addition, all past OnlyDemos and CheapDemos customers will be given a $40.00 coupon towards the purchase of any DemoWolf tutorials or other products. An email will be sent to the customer lists of all past OnlyDemos and CheapDemos customers, and a notice of such placed on the OnlyDemos and CheapDemos websites.

DemoWolf is a Canadian-based producer of flash-based tutorials for the hosting industry. Founded in 2005, DemoWolf has quickly become the fastest growing tutorial provider in the industry, and is the only producer of hosting “voice” tutorials (where in addition to follow-along text instructions, tutorials are professionally narrated). DemoWolf now has over 1800 hosting tutorials (not including the tutorials from OnlyDemos and CheapDemos) ready to be branded for any hosting company, including cPanel/WHM, Plesk, Helm, H-Sphere, Direct Admin, ServerCP, Virtuozzo, phpMyAdmin, phpBB3, Horde, SquirrelMail, RoundCube, WordPress, Drupal, Gallery, osCommerce, Email, FTP, DNS, and many others.

DemoWolf will be exhibiting next week at HostingCon 2008 at Chicago’s Navy Pier.

For inquries or more information, you may contact DemoWolf by visiting their website at www.demowolf.com, or by calling toll free 1-866-905-4678. International callers dial 1-902-820-4678.