web11 server hardware failure October 23, 2013 (resolved)

Between 11:59 AM and 1:13 PM Pacific time on October 23, 2013, there was an outage on the “web11” server due to a hardware problem. Other servers were not affected.

The hardware has been replaced and the server is running normally again. During the outage, incoming email was queued for delivery. All incoming email has now been delivered to the appropriate mailboxes. No email was lost.

Read the rest of this entry »

Technical details of the CVE-2013-4365 mod_fcgid bug

This post is technical, and intended for programmers and security experts — it doesn’t affect our customers.

A few weeks back, one of our hosting customers had a PHP script that would constantly crash an Apache Web server process. We spent a while tracking down the cause, and eventually found a bug in the excellent Apache mod_fcgid FastCGI software that was causing it.

Read the rest of this entry »