PHP7 remote code execution bug exploited in the wild

Fix CVE-2019-11043

Ref:

https://dwaves.org/2019/10/27/cve-2019-11043-nginx-php-fpm-vulnerability-in-php7-exposes-sites-to-remote-hacking-risk-how-to-update-upgrade-centos-7-to-php7-3/

https://wiki.ubuntu.com/Security/Upgrades.

OCS Inventory

Here some references:

1. http://www.hoelzle.net/ocs-inventory-ng-unter-ubuntu-16-04-installieren/
2. http://www.juanluramirez.com/instalar-ocs-inventory-server-ubuntu-16-04/
3. http://ask.ocsinventory-ng.org/8583/tutorial-ocs-2-4-on-ubuntu-16-04
4. https://github.com/OCSInventory-NG/OCSInventory-ocsreports/blob/master/ipdiscover-util.pl
5. https://github.com/OCSInventory-NG/Wiki/blob/master/english/05.Network-Discovery-with-OCS-Inventory-NG/Using-IP-discovery-feature.md
6. http://www.miloszengel.com/ocs-ng-2-2-server-complete-install-guide-on-debian-jessie-8-4/

Import Cert IIS | SSL

Ref: https://www.digicert.com/ssl-support/pfx-import-export-iis-8.htm

Hardening SSL IIS | How to disable SSLv3 and RC4 ciphers in IIS

Here is the link for you to test you SSL URL

https://www.ssllabs.com/ssltest

Before make any changes:

Before make any changes, please backup your registery: 

Here is the steps: 

1. From the Start menu, type regedit.exe in the search box, and then press Enter. If you are prompted for an administrator password or for confirmation, type the password or provide confirmation.
2. In Registry Editor, locate and click the registry key or subkey that you want to back up.
3. Click File > Export.
4. In the Export Registry File dialog box, select the location to which you want to save the backup copy, and then type a name for the backup file in the File name field.
5. Click Save.

After make changes: 

Here is the steps: 

1.       Disabling the SSL v3 Protocol (Poodle Attack)

a.       https://www.digicert.com/ssl-support/iis-disabling-ssl-v3.htm

2.       Weak Diffie-Hellman and the Logjam Attack

a.       https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2016/3174644

b.       https://www.admin-enclave.com/en/articles/windows/396-security-hardening-upgrade-diffie-hellman-prime-to-2048bit-on-windows-server.html

3.       RC4 in TLS is Broken

a.       https://social.technet.microsoft.com/Forums/en-US/faad7dd2-19d5-4ba0-bd3a-fc724d234d7b/how-to-diable-rc4-is-windows-2012-r2?forum=winservergen

b.       https://samrueby.com/2015/06/08/how-to-disable-sslv3-and-rc4-ciphers-in-iis/

Horrey I got A.

Update , Upgrade Freebsd / Ubuntu

Freebsd 11

# freebsd-update fetch
# freebsd-update install
#freebsd-update upgrade -r 11.1-RELEASE
# pkg update
# pkg upgrade

If Error on library :
# pkg-static upgrade  -f


Ubuntu 16 ++

#apt-get update
#apt-get upgrade
#apt-get dist-upgrade
#do-release-upgrade

Reverse Proxy

Ref:
1. https://www.techandme.se/set-up-nginx-reverse-proxy/
2. https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/
3. https://www.knthost.com/nginx/nginx-ssl-perfect-forward-secrecy
4. https://www.knthost.com/nginx/nginx-reverse-proxy-setup-freebsd
5. https://chase-seibert.github.io/blog/2011/12/21/nginx-ssl-reverse-proxy-tutorial.html
6. https://www.digitalocean.com/community/tutorials/how-to-configure-nginx-with-ssl-as-a-reverse-proxy-for-jenkins


sudo apt-get update && sudo apt-get install nginx

Resize Freebsd Space

Ref: https://www.freebsd.org/doc/handbook/disks-growing.html