Debian GNU/Linux Consultancy

Debian is a free operating system (OS) for your server. An operating system is the set of basic programs and utilities that make your computer run. Debian uses the Linux kernel (the core of an operating system), but most of the basic OS tools come from the GNU project; hence the name GNU/Linux.

We know "The Debian Way". We are literally paving the Debian way so who else could manage your Debian based servers better?

Linux system based solutions

Install, set up and maintain a system based on Debian/GNU Linux.

Samba PDC (Primary Domain Controller)
Web server Apache
- PHP
- Rewrite engine
- Reverse proxy
Web server Caudium
JSP and servlet container Jakarta Tomcat
Application server WebSphere, JBoss
SMTP server
- Qmail
- Postfix
- Exim
- Currier
POP3, IMAP server
SQL server
- MySql
- Postgresql
- Firebird
LDAP slapd
Streaming server
Firewall/router (iptables)
FTP server (Proftpd)
DNS server (BIND 8/9, djbdns)
DHCP server
CVS repository
SSH OpenSSH + secure tunnels
Jabber (XMPP)
Asterisk VoIP

Network Security

Firewall (iptables)
IDS SNORT, LIDS
Nessus Security Scanner
Network usage monitor NTOP, tcpdump
VPN solution
Spam filter and server based email antivirus

Managed Web Hosting

At Laposa we can set up and maintain a fully managed secure webserver configured to your needs. Whether you're a small web design house wanting your own hosting or a company after global redundant hosting, we can configure, setup and manage a bespoke solution for your needs.

Office File Server

We have experience with build and long term support large office file servers including Domain Controllers. Central storage space for your company with Windows ACL. Our file server setup includes Time-Machine like backup solution.

Latest Debian Security Advisory

DSA-2475 openssl - integer underflow

It was discovered that openssl did not correctly handle explicit Initialization Vectors for CBC encryption modes, as used in TLS 1.1, 1.2, and DTLS. An incorrect calculation would lead to an integer underflow and incorrect memory access, causing denial of service (application crash.)

DSA-2474 ikiwiki - cross-site scripting

Raúl Benencia discovered that ikiwiki, a wiki compiler, does not properly escape the author (and its URL) of certain metadata, such as comments. This might be used to conduct cross-site scripting attacks.

DSA-2473 openoffice.org - buffer overflow

Tielei Wang discovered that OpenOffice.org does not allocate a large enough memory region when processing a specially crafted JPEG object, leading to a heap-based buffer overflow and potentially arbitrary code execution.

DSA-2472 gridengine - privilege escalation

Dave Love discovered that users who are allowed to submit jobs to a Grid Engine installation can escalate their privileges to root because the environment is not properly sanitized before creating processes.

DSA-2471 ffmpeg - several vulnerabilities

Several vulnerabilities have been discovered in FFmpeg, a multimedia player, server and encoder. Multiple input validations in the decoders/ demuxers for Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska, Vorbis, Sony ATRAC3, DV, NSV, files could lead to the execution of arbitrary code.