Security bulletin: "Ghost" vulnerability on Linux devices

Dear customers,

Recently a critical security bug has been found with the Name Service Switch (nss) library in almost all Linux distributions. This bug can allow attackers to gain access to affected systems remotely by possibility to remotely execute arbitrary machine code without permissions.

Information on this bug and how it can be resolved can be found below. Edpnet has already patched this vulnerability on all of its servers, and we strongly advice our customers to do the same.

A heap-based buffer overflow was found in glibc's __nss_hostname_digits_dots() function, which is used by the gethostbyname() and gethostbyname2() glibc function calls. A remote attacker able to make an application call either of these functions could use this flaw to execute arbitrary code with the permissions of the user running the application.

Source and info: http://ma.ttias.be

Best regards,The edpnet team

^{*All times are listed in CET, Central European Time}

Info: Phishing report

Dear customers,

Some customers have received the phishing e-mail below.
We would like to inform you that this message can be disregarded and is not coming from edpnet.

What is Phishing? Phishing emails are fraudulent messages made to look like they were sent by reputable companies in an attempt to gather your personal and financial details.

Example:

From: INFO SERVICE TELENET [mailto:<removed>]
Sent: woensdag 3 december 2014 16:30
Subject: *Chers (es) clients (es) de EDPNET,*

*Chers (es) clients (es) de EDPNET,*
Le service technique chargé de la maintenance des comptes de messagerie a détecté des accès illégaux à votre messagerie à travers différentes adresses IP. Au risque que votre compte ne soit suspendu dans les prochains jours, notre service de maintenance vous demande de confirmer vos accès de connexion. Au cas où les informations ne seront pas fournies, votre accès à la messagerie serait suspendu définitivement. Pour des raisons de sécurité, veuillez fournir l’intégralité des informations demandées.
Complétez les informations suivantes pour la confirmation à votre accès

* Nom d'utilisateur:........................................
* Mot de passe:.............................................. 

* Adresse e-mail :.......................................... 

* Mot de passe :.............................................
* E-mail secondaire :....................................... 

* Mot de passe :.............................................. 

* Date de naissance:....................................... 

* Pays ou territoire:.........................................
* Profession:......................................................
* Tel:..................................................................
Dès la réception de ces informations, votre messagerie serait suivie contre les accès illégaux. Merci de votre collaboration. 

Webmail EDPNET*

*Cordialement,*

*L’équipe EDPNET*

Info: Possible Power Shortage

Edpnet would like to inform you of the availability of our services during the possible powercuts.

Our government and the media already communicated about the possible power shortage in the next coming months. It is possible that rotational electrical power cuts will be executed in order to avoid a general power outage at any time.
These power cuts will be executed in phases, per areas, presumably during peak hours (between 17h and 20h).

Meanwhile, the government launched the campaign "Off/On" with the aim to provide as much useful information as possible and to answer the many questions you are facing: www.offon.be

You can visit following pages as well:
http://economie.fgov.be/nl/elektriciteitsschaarste
http://economie.fgov.be/fr/penurie_electricite

26 November - Short connectivity issue

Dear customers,

Because of a change on our core infrastructure, customers without a fixed IP may have had issues with their connection. Rebooting the modem solved the issue. Professional customers with a fixed IP did not have any impact.

We apologize for the inconvenience

The edpnet team

^{*All times are listed in CET, Central European Time}

24 November - EFM + Fiber outage information

Dear customers,

We had an outage on all the EFM and Fiber connections this morning. The cause was a defective connector card on the Proximus Backbone. The card was replaced at 7.25AM.

Description: 
Start: 2014-11-24 02:15 AM^*
End: 2014-11-24 07:25 AM^*
Duration: 05h 10m
Impacted services:  All services for our Fiber and EFM customers.

These customers have been informed by email.

Update: There was also an unannounced maintenance in Brussels last night. We had 2 interruptions between 2AM and 6AM

Start: 2014-11-24 02:00 AM^*
End: 2014-11-24 06:00 AM^*
Duration:
Impacted services:  All customers in the Brussels area.

We apologize for the inconvenience

The edpnet team

^{*All times are listed in CET, Central European Time}