July 2013 - Outages - Outages Lists

suno.edu down
by Ben Bartsch 29 Jul '13

29 Jul '13

We lost suno.edu around midnight CDT on Saturday 7/27/2013. We have been unable to contact anybody at the site. Is anybody out there listening that could shed some light on this? We confirmed with the circuit provider that they can see their equipment. Thanks. -ben ASN 32440

2 3

wiki.outages.org back online
by virendra rode 28 Jul '13

28 Jul '13

Hi - I apologize for the delay in getting wiki up/running in a timely manner. At this time wiki.outages.org is up and functioning as expected. The disk space had filled completely causing mysql to crash. We had to purge old apache logs to get enough space to start MySQL safely. As of right now, there is 160+ gigs of spam entries from past year but from our maintenance in January, we do not see that additional spam has been posted. We will need to go through another round of maintenance so we can proceed with spam removal. More as it develops. regards, /virendra

1 0

Fwd: [security-officer@isc.org: Notice: BIND Security Jul2013 CVE2013-4854]
by Jay Ashworth 27 Jul '13

27 Jul '13

There's an attack in the wild on BIND >9.7; if you have DNS problems, this may be pertinent. [Forwarded from NANOG] Cheers, -- jra ----- Forwarded Message ----- > From: "staticsafe" <me(a)staticsafe.ca> > To: nanog(a)nanog.org > Sent: Saturday, July 27, 2013 6:27:59 AM > Subject: [security-officer(a)isc.org: Notice: BIND Security Jul2013 CVE2013-4854] > ----- Forwarded message from ISC Security Officer > <security-officer(a)isc.org> ----- > > Date: Fri, 26 Jul 2013 13:46:50 -0700 > From: ISC Security Officer <security-officer(a)isc.org> > To: bind-announce(a)lists.isc.org, bind-workers(a)lists.isc.org, > bind-users(a)lists.isc.org > Subject: Notice: BIND Security Jul2013 CVE2013-4854 > > IMPORTANT: The security issue described below has been confirmed by > ISC > to be 'in the wild' as of 18:00UTC July 26, and exploitation of this > vulnerability against production servers has been reported by multiple > organizations. Please be advised that immediate action is recommended. > > A specially crafted query can cause BIND to terminate > CVE: CVE-2013-4854 > Document Version: 2.0 > Posting date: 26 July 2013 > Program Impacted: BIND > Versions affected: Open source: 9.7.0->9.7.7, 9.8.0->9.8.5-P1, > 9.9.0->9.9.3-P1, 9.8.6b1 and 9.9.4b1; > Subscription: 9.9.3-S1 and 9.9.4-S1b1 > Severity: Critical > Exploitable: Remotely > Description: > > A specially crafted query that includes malformed rdata can cause > named to terminate with an assertion failure while rejecting the > malformed query. > > BIND 9.6 and BIND 9.6-ESV are unaffected by this problem. Earlier > branches of BIND 9 are believed to be unaffected but have not > been tested. BIND 10 is also unaffected by this issue. > > Please Note: All versions of BIND 9.7 are known to be affected, > but these branches are beyond their "end of life" (EOL) and no > longer receive testing or security fixes from ISC. For current > information on which versions are actively supported, please see > > http://www.isc.org/downloads/software-support-policy/bind-software-status/. > > Impact: > > Authoritative and recursive servers are equally vulnerable. > Intentional exploitation of this condition can cause a denial > of service in all nameservers running affected versions of BIND > 9. Access Control Lists do not provide any protection from > malicious clients. > > In addition to the named server, applications built using libraries > from the affected source distributions may crash with assertion > failures triggered in the same fashion. > > CVSS Score: 7.8 > > CVSS Equation: (AV:N/AC:L/Au:N/C:N/I:N/A:C) > > For more information on the Common Vulnerability Scoring System and > to obtain your specific environmental score please visit: > http://nvd.nist.gov/cvss.cfm?calculator&adv&version=2&vector=(AV:N/AC:L/Au:… > > > Workarounds: > > No known workarounds at this time. > > Active exploits: > > Crashes have been reported by multiple ISC customers. First > observed in the wild on 26 July 2013, 18:00 UTC. > > Solution: > > Upgrade to the patched release most closely related to your > current version of BIND. Open source versions can all be > downloaded from http://www.isc.org/downloads. Subscription > version customers will be contacted directly by ISC Support > regarding delivery. > > BIND 9 version 9.8.5-P2 > BIND 9 version 9.9.3-P2 > BIND 9 version 9.9.3-S1-P1 (Subscription version available via DNSco) > > Acknowledgements: > > ISC would like to thank Maxim Shudrak and the HP Zero Day > Initiative for reporting this issue. > > Document Revision History: > > 1.0 Phase One Advance Notification, 18 July 2013 > 1.1 Phases Two and Three Advance Notification, 26 July 2013 > 2.0 Notification to public (Phase Four), 26 July 2013 > > Related Documents: > > Spanish Translation: planned > Japanese Translation: https://kb.isc.org/article/AA-01023 > Portuguese Translation: https://kb.isc.org/article/AA-01021 > > > See our BIND Security Matrix for a complete listing of Security > Vulnerabilities and versions affected. > > This Knowledge Base article https://kb.isc.org/article/AA-01016 > provides additional information and Frequently Asked Questions about > this advisory. > > If you'd like more information on our product support or about our > Subscription versions of BIND, please visit > http://www.dns-co.com/solutions > > Do you still have questions? Questions regarding this advisory > should go to security-officer(a)isc.org. To report a new issue, > please encrypt your message using security-officer(a)isc.org's PGP > key which can be found here: > > https://www.isc.org/downloads/software-support-policy/openpgp-key > > If you are unable to use encrypted email, you may also report new > issues at: https://www.isc.org/mission/contact/. > > Note: > > ISC patches only currently supported versions. When possible we > indicate EOL versions affected. > > ISC Security Vulnerability Disclosure Policy: > > Details of our current security advisory policy and practice can > be found here: ISC Software Defect and Security Vulnerability > Disclosure Policy > > This Knowledge Base article https://kb.isc.org/article/AA-01015 > is the complete and official security advisory document. > > Legal Disclaimer: > > Internet Systems Consortium (ISC) is providing this notice on > an "AS IS" basis. No warranty or guarantee of any kind is expressed > in this notice and none should be implied. ISC expressly excludes > and disclaims any warranties regarding this notice or materials > referred to in this notice, including, without limitation, any > implied warranty of merchantability, fitness for a particular > purpose, absence of hidden defects, or of non-infringement. Your > use or reliance on this notice or materials referred to in this > notice is at your own risk. ISC may change this notice at any > time. A stand-alone copy or paraphrase of the text of this > document that omits the document URL is an uncontrolled copy. > Uncontrolled copies may lack important information, be out of > date, or contain factual errors. > > (c) 2001-2013 Internet Systems Consortium > > > _______________________________________________ > bind-announce mailing list > bind-announce(a)lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-announce > > > ----- End forwarded message ----- > > -- > staticsafe > O< ascii ribbon campaign - stop html mail - www.asciiribbon.org > Please don't top post. > Please don't CC! I'm subscribed to whatever list I just posted on. -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

1 0

http://wiki.outages.org/ ...outage? (mysql ate teh wiki)
by L.T. Easterly 25 Jul '13

25 Jul '13

What's the status on the wiki coming back up? I was looking for the bookmarks for some of te Telco status pages, seems like i hit the wiki a few days ago and got the same message: Wiki has a problem *Sorry! This site is experiencing technical difficulties.* Try waiting a few minutes and reloading. (Can't contact the database server: Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2) (localhost))

2 1

Brighthouse florida
by Jered Morgan 25 Jul '13

25 Jul '13

Getting reports of intermittent issues with Brighthouse internet in Florida can anyone confirm? -- The information contained in this message is privileged and confidential and protected from disclosure under Title 18 USC 2150-2521. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you.

3 2

Brighthouse Florida
by Lucky 225 25 Jul '13

25 Jul '13

I'm getting reports of intermittent internet issues for customers in Florida on Brighthouse anyone have any info on this? -- The information contained in this message is privileged and confidential and protected from disclosure under Title 18 USC 2510-2521. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you.

1 0

P4: Facebook: XMPP chat: missing Real Name aliases
by Jay Ashworth 24 Jul '13

24 Jul '13

I use XMPP and Pidgin to connect to FB chat, and tonight, for the first time in my memory, some of my active users in the user list are showing up (both in the list and in conversation panes) with no "Real Name" alias; just -biglongdecimalnumber(a)chat.facebook.com. There doesn't seem to be any pattern; most users who are active show up as usual. It's flapped in and out several times; first spotted around 2233EDT. If anyone has a channel to Facebook Chat engineering, you might pass this along. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

2 1

Google DNS Sluggishness
by Kraig Beahn 23 Jul '13

23 Jul '13

Any other operator in the SouthEast seeing any issues with GoogleDNS by chance? Not seeing any issues in any other locations except for our Atlanta, Jacksonville and Miami facilities. [image: Inline image 1]

3 3

ATT DSL outage in 989 area code(Bay City, MI)
by Mitch 22 Jul '13

22 Jul '13

Is anyone else seeing a DSL outage(sync no surf) for the past few days? We have 2 DSL lines that have been down for 3days 4 hours at this point. ATT keeps pushing the ETR back. Now they are telling us the ETR is 7/24/13 at 4pm. Does anyone have any "inside" information of whats going on? We have 2 dry loops that have sync but we can't authenticate. ATT did their normal song and dance of saying no outage for the first day and we had to dispatch a tech to find out the outage. Location is Bay City, MI Ticket # I provided for the outage is 2677-12440

1 0

AT&T | Ohio
by michael sterl 22 Jul '13

22 Jul '13

It appears AT&T is having a few Internet issues in Ohio. I've heard all AT&T Internet but not 100% sure. I do know NE Ohio Uverse is having issues Update I received from AT&T: Massive outage in ohio. Not expected to be back up until 2:30 CST. michael sterl

2 2