Fixing the Log4j2 vulnerability in spring boot application

 Hi all,

Software Industry was in a shock with the log4j2 zero day exploit.

Exploited area

The Apache Log4j2 version ( >=2.0 to <=2.14.1 ) is exploitable due to an attacker controlled LDAP and  JNDI endpoints.

Appendix

LDAP (Light Weight Directory Protocol) is an industry standard protocol to access directory services.

JNDI (Java Naming and Directory Interface) is a Java API for a directory service that allows Java software clients to discover and look up data and resources via a name.

Find more information about the vulnerability from NVD website link.

https://nvd.nist.gov/vuln/detail/CVE-2021-44228

NVD (National Vulnerability Database) is maintained by National Institute of Standards and Technology (NIST),  An official part of United States of America (USA) government's Department of Commerce.

Fix the vulnerability

• Even in the latest spring boot package uses the vulnerable 2.14.1 log4j2 version.
• So, we need to explicitly add the specific version in the properties as below
• In pom.xml file, creating <properties> tag if not exists and add the attribute log4j2.version with version 2.16.0 (latest)

<properties>

    <log4j2.version>2.16.0</log4j2.version>

</properties>

• To check the version applied to the project, run the following command

mvn dependency:tree | grep "log4j"

• The result should look like below

[INFO] |  |  |  +- org.apache.logging.log4j:log4j-to-slf4j:jar:2.16.0:compile

[INFO] |  |  |  |  \- org.apache.logging.log4j:log4j-api:jar:2.16.0:compile

• The similar type of vulnerability fixes available for other project builds.

Hope you will find the above information useful and fix the issue immediately to keep the servers safe from attacks.

Send your valuable feedback and comments to psrdotcom@gmail.com

 

Asus Zenfone 5 Clear Cache to speed up your phone

Hi all,

Today I will describe about clearing cache in Asus Zenfone 5 to speed up/boost your phone performance.

Pre-requisite:

• Take backup on your internal storage (Ex: Pics, docs, your important info)

• Make sure that, you have enough battery level or keep the phone in charging mode

Procedure:

1. Switch off your phone
2. Wait for 15 seconds
3. Press the power button and volume up button simultaneously until Asus logo appears on your mobile screen
4. 
5. By default, it will show "Normal Boot"
6. 
7. By pressing volume up/down button, you will be able to see the following options
8. Normal Boot, Power Off, Recovery Mode, Restart Bootloader
9. Select "Recovery Mode"
10. 
11. Press power button
12. Phone will automatically reboots
13. You will be able to see "No Command" on screen
14. 
15. Press and hold power button and volume up button simultaneously for 2 seconds and leave it
16. Now, you will be able to a screen with following options
17. reboot system now, apply update from adb, wipe data/factory reset, wipe cache partition, reboot to bootloader, power down, view recovery logs
18. Navigate by clicking volume down button to highlight "wipe cache partition"
19. 
20. Select using power button
21. You will be able to see fomatting cache message
22. 
23. Wait till the format completes
24. Once, it shows the format complete, select "Reboot system now" option

Enjoy the speedy Android flavor now.

Please send your comments and review to psrdotcom@gmail.com

Nexus 7 Files accessing (storage drive) issue fix after upgrading to Marshmallow

Hi friends,

Today when I connected my Nexus 7 tab, I was unable to see the drive and folder structure. But in the file explorer it is able to detect the Nexus 7 by showing the icon. When you double click to view the files, there is nothing.

1. After googling, the following solutions worked for me.
2. Go to device management
3. Right click Android ADB Interface and do uninstall
4. After uninstalling the drivers, change the USB type in Nexus to PTP and immediately change to MTP
5. Unplug and plug the Nexus to your PC
6. Now the system will re-install the driver

Hope, this post will be useful when OS upgraded and unable to access file system of device

Android 6.0.1 Upgrade fix

After installing the driver, device might be recognized but we need to change the "Use USB for options" from any one of the following options

Notification Panel

1. Select the "USB for file transfer - Touch for more options"
2. You will be prompted to choose any one of the following
• Charging
• File transfers
• Photo transfers
• MIDI
3. Select File transfers to see the "Internal Storage"

Developer Options

1. Go to "Settings->Developer Options"
2. Go to "Select USB Configuration" setting
3. Choose "MTP (Media Transfer Protocol)" for transferring the files

Now you should be able to see the file storage in explorer

Please send your feedback and comments to psrdotcom@gmail.com