H-Sphere Security Alert

25 Mar 2006


All H-Sphere customers are strongly advised to perform the following immediate actions:

1.  Re-install the ssh packages (ssh daemon and ssh client) on the CP server according to the respective operational system documentation.
2.   Change CP box root password.
3.   Re-create and re-publish ssh access keys on all *nix based boxes

We also highly recommend closing SSH access to the CP server for all IPs except those that are well known and trusted.
Psoft uses the following IPs to ssh to customer CP's:

Copyright 1998-2008. Positive Software Corporation.
All rights reserved.