H-Sphere Security Alert



25 Mar 2006

SECURITY ALERT

All H-Sphere customers are strongly advised to perform the following immediate actions:

1.  Re-install the ssh packages (ssh daemon and ssh client) on the CP server according to the respective operational system documentation.
2.   Change CP box root password.
3.   Re-create and re-publish ssh access keys on all *nix based boxes

We also highly recommend closing SSH access to the CP server for all IPs except those that are well known and trusted.
Psoft uses the following IPs to ssh to customer CP's:
194.44.204.0/24
213.130.17.169
213.130.17.170



Copyright 1998-2008. Positive Software Corporation.
All rights reserved.