httpoxy – a CGI application vulnerability now under control on our servers

A recently re-discovered server-side application vulnerability has been sending shivers down Internet users’ spine for a couple of days now.
The so-called ‘httpoxy’ vulnerability affects applications whose code is executed in CGI or other CGI-like environments.
To address this critical issue, we have enabled automatic website and app protection for managed solutions on our web hosting platform.

What is the httpoxy vulnerability about?

The new httpoxy vulnerability opens up ‘a green corridor’ for attackers to exploit the communication between a web application and other external applications via API.
If a vulnerable web application makes an outgoing HTTP connection, this could lead to a few critical consequences:

• the outgoing HTTP requests could be proxied;
• the server could be configured to send private information to a particular address and port;
• the server resources could be exhausted by forcing the application to use a malicious proxy;

An outgoing connection could be exploited when the hacker makes a request that includes a ‘Proxy’ request header.
The CGI then turns the header into an environment variable called HTTP_PROXY, which is used to configure an outgoing proxy.
The web application in turn makes a request to a hacker-defined destination instead of the particular API. Let’s see how this translates in a real-life scenario.

Protection measures against httpoxy (Managed Services):

As soon as the httpoxy vulnerability was announced, we took immediate measures to patch all web hosting services, which are under our control.
These include:

• All shared web hosting services;
• All semi-dedicated servers;
• Hepsia Control Panel-managed OpenVZ Virtual Private Servers;
• Managed OpenVZ Virtual Private Servers;
• Hepsia Control Panel-managed dedicated servers;
• Managed dedicated servers;

Protection measures against httpoxy (Unmanaged Services):

If you are using a non-managed OpenVZ server, a KVM VPS or a dedicated server, or/and do not use the Hepsia Control Panel, then you will need to take immediate measures to protect your applications from the httpoxy vulnerability.
First of all, keep in mind that your applications are in fact immune to the httpoxy vulnerability in the following cases:

• if your applications are making API requests over an encrypted (SSL/TLS/HTTPS) connection; httpoxy only affects unencrypted requests;
• if you are not using CGI, but instead faster and better code environment alternatives that have been introduced over the last few years;

If you are using CGI, but have not yet made use of an encrypted connection, then you can easily prevent any exploit attacks by blocking the ‘Proxy’ header.

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

We Analyzed 1 Million Google Search Results. Here’s What We Learned About SEO

Need some SEO help & tips for your site?
We Analyzed 1 Million Google Search Results. Here’s What We Learned About SEO 

Evostrix OpenRealty Compatible

Our servers are completely compatible with OpenRealty. We offer a one-click OpenRealty script installation, a 24x7x365 customer support service, a 99.9 percent server uptime guarantee and a myriad of free bonuses. You can get an OpenRealty-optimized web hosting package for just £3.00 a month, along with a new domain.


Evostrix OpenRealty Web Hosting

Web Hosting KVM VPS 90% Off Promo

KVM VPS Hosting 90% Off promo campaign for the Evo KVM 1 plan.
Limited Time Offer.

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

Evostrix Domains Over 70+ TLD's

At Evostrix Web Hosting you can find domain name registration services at very low prices. With us you can choose from more than 70+ Top-Level Domain extensions. Plus, we offer multi-year domain registration options, so you can reserve your domain name for up to 10 years.

 Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

Dedicated Hosting Features

With a dedicated servers hosting, you can resolve any website performance-related problems. Picking a dependable US-based data center facility for your North America-oriented sites is decisive for reaching greater performance levels. This is why we work with a top-of-the-line datacenter facility situated in the heart of Chicago, Illinois. This partnership guarantees that all our dedicated server customers will enjoy much faster page load times.

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

Evostrix Web Hosting Security Features

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

Evostrix OpenVZ VPS Servers Video Presentation

The affordable, yet very effective OpenVZ VPS Hosting Plans service is appropriate if you would like more out of web hosting.

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

What Are The Main Advantages Of PHP 7?

The most striking advantage of upgrading to PHP 7 is the practically doubled real-world performance speeds. Behind this amazing improvement lies the brand new version of the Zend engine that has been implemented under the code name of PHP#NG.

The refactored Zend Engine offers significantly reduced memory usage and a newly implemented just-in-time compilation (JIT) functionality, which resolves the previous prior-to-execution compilation problems.
On the figure below, you can check the performance benchmark figures for frameworks and applications provided by the Zend Performance Team and see for yourself:

 

As you can see, the performance gains realized by PHP 7 vary between 25% and 70%.
You can see the full infographic on PHP 7 performance on the Zend website. 

How to enable PHP 7 for my sites and applications?
 Our customers can upgrade to PHP 7 with a click of the mouse.
Just go to your Web Hosting Control Panel and select PHP Settings from the Advanced menu.
Any of our plans supports PHP Version: 4/5.2/5.3/5.4/5.5/5.6/7.x

 Ready to order? Visit Evostrix Today:
Visit Evostrix Web Hosting

Attracta SEO Tools Now Available With All Our cPanel Hosting Plans.

SEO usually comes as an afterthought when you are just starting out with your website. You often either don’t have time to do it yourself or you don’t have the means to hire an expert to carry out the optimization work for you. And when you finally do find time, your top priority is usually on-page SEO (keyword placement, choice of meta tags, etc.). Off-page SEO work (link building, directory submission, etc.) is usually done months after your site is ready.

Ready to order? Visit Evostrix Today:
Evostrix Web Hosting

Hepsia CP Applications Installer

Each of our shared hosting
plans comprises a free-of-cost, Hepsia hosting Control
Panel-integrated, single-click Applications Installer tool, which you
can use to activate different popular PHP apps. It is very easy to use -
you can set up your personal journal, message board, CMS-driven web
site, image gallery or e-store with only one single mouse click and you
don't have to have any web design expertise....



Full Info:
Applications Installer

Evostrix SSL Certificates

SSL Certificates Revealed

Internet safety is a main priority for everybody who shops online,
and your customers will anticipate nothing but the highest possible
level of safety when they purchase your services.



Full info:

SSL Certificates Revealed