Archive for February, 2015

Ghost linux exploit on Ubuntu 12.04 and 12.10

If you have a version of Ubuntu that old, you usually cannot even run the ‘fix’ all the blogs are talking about. Everyone advices;

apt-get clean; apt-get update; apt-get upgrade

but that will probably give you a lot of file not found. When you update to the old distro repository for Ubuntu there is a good chance, especially on 12.10 that it will tell you libc is fine and updated already; no newer versions while the ghost test script tells you it’s vulnerable.

What to do then is

do-release-upgrade

and follow the steps. Things to notice;

– if your connection cuts out you have to SSH back in via the extra ssh session on 1022 and run screen -r to continue
– when you get the question that the boot drive is no longer found (happens in a read config / udev situation), just pick the drives the boot up raid device is built from, all of them, to place grub on

After this the test script will report you are ok and you can sleep again.