Parallels Plesk PHP-CGI Vulnerability
Please read this message in its entirely and take the recommended actions :
A security vulnerability in PHP was identified that impacts some of Parallels products. The goal of this email is to make you aware of the situation.
- Situation
The PHP Group and the United States Computer Emergency Readiness Team (US-CERT) has issued a vulnerability alert on 3 May that PHP-CGI-based setups contain vulnerability when parsing query string parameters from .php files. You can find more information at the PHP website.
· Impact
A remote unauthenticated attacker could obtain sensitive information, cause a denial of service condition or may be able to execute arbitrary code with the privileges of the web server.
· Parallels Products Impacted
o Parallels Operation Automation Shared Hosting and Parallels Operation Automation Shared Hosting NG modules (all versions)
o Parallels Plesk Panel for Linux versions 9.0 - 9.2.3 might be vulnerable (Plesk team is working on an update)
o Parallels H-Sphere
- Solution
A temporary patch for PHP installations does exist, and Parallels is working on incorporating this patch in our products as soon as possible.
- CALL TO ACTION
For immediate solution customers should read the following knowledge base articles for instructions:
- http://kb.parallels.com/en/113814 - for POA
- http://kb.parallels.com/en/113818 - for Plesk
- http://kb.parallels.com/en/113821 - for H-Sphere
As this article is at a preliminary stage and will be updated in the nearest future, please subscribe to those articles updates via e-mail (for example by clicking here for 113814 and here for 113818). You might also want to subscribe to the RSS feed here.
Plesk Team
New Burst, Hybrid, and Dedicated Clouds
At Krypt we know that Clouds don't come in just Private or Public, big or small. We believe the Cloud and especially your Cloud Server should be tailored to how you want it at your specific budget. Our Cloud Servers come in 3 distinct types called
- Burst - these Cloud Servers have pooled burst resources and are great low cost entry level servers
- Hybrid - these Cloud Servers have combined Burst and Dedicated resources that allow the flexibility of bursting at a fraction of the cost for dedicated resources
- Dedicated - the Cloud Servers have reserved and guaranteed resources so that you can run applications with confidence
Of course if you can not find a plan that meets your needs you can always create your own Custom Cloud only at Krypt! Choose any combination of CPU, Memory, Disk and Bandwidth options for your Cloud Server with a mixture of dedicated and burst resources. If you ultimately don't like to share, go with Krypt Private Cloud for your enterprise requirements.
Cloud Hosting without the fluff - only at Krypt!
Introducing Krypt CloudMail the Better Way to Communicate
Krypt is pleased to introduce Krypt CloudMail to our portfolio of services. CloudMail is an Enterprise grade mail service at consumer prices with features and functionality that exceed Microsoft Exchange, Office 365 and Google Mail for Business. CloudMail runs in variety of forms whether you're looking for a completely private setup or on our public CloudMail. With every deployment of CloudMail you are guaranteed elastic scalability of your email platform that grows as your company grows. CloudMail plans start at just $5 per mailbox for 5GB of space. View CloudMail plans here or discover all the features here.
Putting our Cloud Servers to the test
We recently benchmarked our Cloud servers against the Atom D525 1.8GHz and the results may suprise most customers but not us. We have always been confident in the performance of our Cloud servers. We used the popular benchmarking tool Passmark to perform the tests. Note that the servers were ran for Graphics with stock onboard graphics cards and VMware tools enabled.
Test group involved the following servers:
Server 1:
Atom D525 1.8GHz
2GB RAM DDR3
80GB HDD SATA 7200RPM
Results:
Server 2:
Cloud Server
1GHz Dedicated
1GB RAM Dedicated
RAID10 SAN backed storage
Results:
Server 3:
Cloud Server
2GHz Dedicated
2GB RAM Dedicated
RAID10 SAN backed storage
Results:
Server 4:
Cloud Server
4GHz Burst Only
4GB RAM Burst Only
RAID10 SAN backed storage
Results:
Overall Results:
| Atom D525 | 1/1 Cloud | 2/2 Cloud | 4/4 Burst Cloud | |
| CPU Mark | 859.7 | 674 | 1010.6 | 1123.8 |
| Memory Mark | 328.7 | 335.1 | 684.4 | 692.9 |
| Disk Mark | 910.7 | 682.1 | 786.9 | 989.1 |
| PassMark Rating | 510.9 | 431.2 | 673.6 | 780.4 |
As a cost effective alternative to our Atom D525 plan we recommend going with our Cloud Servers with either full dedicated resources or hybrid burst options that best suite your requirements. Our cloud servers can be configured for 100% dedicated resources, 100% burst resources or a mixture of both called Hybrid Cloud Servers.
Learn more here http://www.krypt.com/cloud/
Wrapping up 2011
It's been a rather short but adventurous year for VPLS Inc and it's divisions. We ended 2010 with a huge surge in demand for our products which propelled the momentum into 2011 even during our typically slow month of February where we found ourselves still building and bringing up new systems due to high demand. Towards Spring we had our first ever Reseller Conference in Guangzhou, China which was a great learning experience for us as well as our Resellers. Next years' event will be even better based off some things we gathered from the first event!
As summer rolled around we found ourselves in the midst of server migrations and build outs of our existing datacenter space in SNA1 and LAX7 expanding each to near 90% capacity. Towards the end of summer we started planning for our first Internet Datacenter in the East coast which is chronicled in detail here http://blog.vpls.net/2011/11/01/journey-to-the-east/. I've personally been so busy that I couldn't finish the second half of the story home but that story will be left to the individuals that I shared the experience with.
Our Bangkok, Thailand office escaped the major floods that ravaged Central Thailand and Bangkok although some employee's homes were not spared the devastation. With all disasters comes grief but we must always be thankful that the things most important to us i.e. family are safe and out of harms way. VPLS Thailand and VPLS Inc founders have started a fund to help employees stricken by the disaster.
We knew going into the 4th quarter that it was going to be a lot of work with the turn up of IAD1 complete we refocused our efforts to building out our new Northern California flag ship datacenter in Sacramento, CA - SMF1. What was supposed to be a small build out ended up taking over 2 weeks to prep and prepare as well as circuit delays pushing the grand opening date back further and further but on December 26th our first batch of servers were online and ready to be sold! In fact orders poured in shortly after news went out and we're riding another wave of momentum into 2012!
Overall it was a great year for VPLS Inc with record sales and earnings throughout as well many corporate initiatives for our employees in the United States and Thailand. Our annual Food Drive yielded 2 pallets of canned foods and other items for the Orange County Food Bank. We look forward to expanding into further territories in 2012 and bringing innovation for all of our customers! VPLS... taking you beyond!
- Tim Mektrakarn, COO
Sacramento Internet Datacenter (SMF1 IDC) Grand Opening
It's been a long month for the Krypt Engineering team as we have spent hours building and preparing our new Sacramento flag ship Internet Datacenter (IDC) for service. With well over 1000 servers ready to go we're still in the process of adding additional network capacity between Sacramento (SMF1) and our San Jose (SJC1) and Los Angeles (LAX1) POP's. This will ensure diverse and redundant paths for network connectivity out of SMF1. SJC1 has also added direct carrier access with our existing providers China Unicom, China Telecom, TINET and TeliaSonera.
With the commission of our new datacenter with over 22,000 sq ft of raised floor and 4MW of critical load power we are also pleased to announce the addition of Internap to the VPLS Network blend. Connectivity through Internap will ensure the best routing possible through Internap's patented Managed Internet Route Optimizer (MIRO) technology which evaluates critical performance factors to select the best possible route to any given destination among the many possible paths.
Run your own Virtual Internet Datacenter (vIDC)
For a long time Krypt has been the leader in VMware technology for the hosting industry. Recently we were one of 31 service providers we were selected by VMware for innovation in Cloud Technology.
We are very pleased to offer vCloud Director by VMware. With vCloud Director users can create their very own Virtual Internet Datacenter. You can create your own custom virtual dedicated server plans.
Here are a few of many key benefits of using vCloud Director:
Fast provisioning
Servers are set up near instant because virtual deployment.
Virtual datacenters
Create your own custom plans by allocating the RAM, CPU, Hard drive, and bandwidth into your own virtual dedicated server.
Self-service portal
Users will have direct access to their own Virtual Internet Datacenter and can deploy/upload their own custom images.
At Krypt we encourage innovation by leading it. For more information about accessing vCloud Director with Krypt view: http://kb.krypt.com/article/227
An overview about vCloud Director can be found from Vmware’s website: http://www.vmware.com/products/vcloud-director/overview.html
Please let us know if you like to test out vCloud Director and our team will be happy to set you up an account.
VPLS Completes Trademark of word Krypt
VPLS Inc, a leader in dedicated and cloud server hosting headquarters in Orange, CA has completed the USPTO Trademark process for the service mark Krypt, registration number 4037909.
| Word Mark | KRYPT |
| Goods and Services | IC 042. US 100 101. G & S: Providing online computer services in the field of web hosting, dedicated server hosting and virtual server hosting, namely, hosting websites for others, hosting software, and hosting other applications of others on dedicated and virtual servers; Computer consultation in the fields of web hosting, dedicated server hosting and virtual server hosting. FIRST USE: 19980512. FIRST USE IN COMMERCE: 19980512 |
| Standard Characters Claimed | |
| Mark Drawing Code | (4) STANDARD CHARACTER MARK |
| Serial Number | 85251033 |
| Filing Date | February 24, 2011 |
| Current Filing Basis | 1A |
| Original Filing Basis | 1A |
| Published for Opposition | July 26, 2011 |
| Registration Number | 4037909 |
| Registration Date | October 11, 2011 |
| Owner | (REGISTRANT) VPLS Inc. CORPORATION CALIFORNIA 200 1744 West Katella Ave Orange CALIFORNIA 92867 |
| Prior Registrations | 3910912 |
| Type of Mark | SERVICE MARK |
| Register | PRINCIPAL |
| Live/Dead Indicator | LIVE |
Parallels Plesk Panel 10.4 Available
Parallels has recently announced the newest release of Parallels Plesk Panel 10.4. This recent release is the best and most stable release of Parallel's Plesk Panel.
Some of the new features rolled out in the 10.4 release includes:
Web Hosting
- Configurable PHP settings - get fine-grained control over the settings at plan and subscription levels and, even more, at website and subdomain levels.
- Support for Web Deploy and Web Matrix - publish code in a fast and convenient way to production environments.
- Control over Apache modules - improve web server performance tuning by turning off unused Apache modules.
- Quick preview of websites even before all the necessary DNS records are set up.
Panel Usability
- Quick search - promptly find an account, a page, or an action by typing your request in the new search box.
- Unified Tools & Settings page - view all tools or settings in one click as they are available on the unified Tools & Settings page.
- Hosting management from Server Administration Panel allows you to remain in the Server Administration Panel while working with the web hosting tools of your customers.
- Simple view for customers - hide unnecessary interface elements of Control Panel from novice customers.
- Simple view for administrators - choose only the tools you would like to use and hide complexity from beginners.
Installation, Upgrade, Migration, Backup and Restoration
- Notifications of updates and upgrades - be informed of the latest technology and security fixes; limit notifications to only the upgrades that match your desired quality level.
- Migration tools, enriched flexibility and improved troubleshooting - view already migrated objects, disallow license migration, view detailed descriptions of migration failures and much more.
- SSO by IP - no need to configure a host name for SSO, now it can use the IP addresses of Panel and Business Manager.
- Backup Manager, improved troubleshooting and reliability - view detailed information about reasons for backup creation failures and forget about failures caused by insufficient disk space.
- Support for new Operating Systems (CentOS 5.7, CentOS 6.1, CloudLinux 6.1) and the new EZ templates allow you to upgrade the Panel to future versions.
The Krypt team is excited to get this update rolled out as soon as possible to offer all users these new features.
Krypt Rapid Deploy Servers!
There are times in life when you needs things FAST and simply can't wait for that moment to pass by. With Krypt Rapid Deploy servers, our servers can be brought up in MINUTES! Simply choose the server package you are looking for by following the RAPID DEPLOY link from our home page
All servers come AS-IS with the additional hardware listed, server operating system and server OS language. Additional network and backup options can be added but this will add delay to the order setup time.
Note that deployment time listed is after the order has been verified by our Billing Department for new customers. Existing customers may purchase Rapid Deploy servers and receive the server details in minutes.