Server Security - Page 13 - Results from #240

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Secure Apache2 Using Mod_Chroot on Fedora 12 for Better Protection

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This guide explains how to set up mod_chroot with Apache2 on a Fedora 12 system. With mod_chroot, you can run Apache2 in a secure chroot environment and make your server less vulnerable to break-in attempts that try to exploit vulnerabilities in Apache2 or your installed web applications.

LinuxSecurity.com Team
Apr 07, 2010

Google Researchers Expose 20 Kernel Bugs in Linux and Windows Systems

Two security researchers at search engine giant Google have discovered 20 kernel bugs, about half remaining unpatched, affecting Windows, Linux and the popular VMware virtualization software over the last several years. Google engineers, Julien Tinnes and Tavis Ormandy said kernel security must improve. They shared their kernel security research recently at the CanSecWest Applied Security Conference. They say they hope their data motivates operating system developers to reduce the kernel attack surface.

LinuxSecurity.com Team
Mar 31, 2010

Best Open Source Security Apps for Linux, Mac, and Windows Systems

According to the FBI, cybercrime complaints rose 20 percent in 2009, and victims lost $559 million, more than double the year before. With online crime on the rise, it's more important than ever to protect your systems. But you don't have to pay a lot of money for security. The open source community continues to produce (and maintain) excellent tools that fulfill a wide variety of security needs.

LinuxSecurity.com Team
Mar 31, 2010

Rootkit Threats: Detection And Removal Strategies For Linux Systems

There's now a threat to online life that's so potentially potent it requires a new form of defence. Rootkits hide inside the operating system, actively defending themselves and hiding their presence. To arm your system against rootkits, you first need to understand them. So, where have they come from, how have they evolved and how, crucially, can they be stopped?

LinuxSecurity.com Team
Mar 24, 2010

Replacing Failed Drive In Linux RAID For Improved Data Integrity

A few weeks ago I had the distinct displeasure of waking up to a series of emails indicating that a series of RAID arrays on a remote system had degraded. The remote system was still running, but one of the hard drives was pretty much dead.

LinuxSecurity.com Team
Mar 23, 2010

Google Skipfish Web Scanner for Rapid Security Assessments

The open-source skipfish software can be used as preparation for a professional Web application security evaluation. Google on Friday released an automated Web security scanning program called skipfish to help reduce online security vulnerabilities. Though skipfish performs the same functions as other open-source scanning tools like Nikto and Nessus, Google engineer Michal Zalewski argues that skipfish has a several advantages.

LinuxSecurity.com Team
Mar 22, 2010

Ubuntu 6.06 To 9.10: Critical Kernel Issues and Security Updates

I just know other outlets will eventually pick up on this and add nonsense and subtract the facts at their own leisure, so I thought it worthwhile to get in early. A kernel vulnerabilities have been uncovered across a range of Ubuntu releases, covering 6.06 LTS to 9.10, also including Kubuntu, Edubuntu, and Xubuntu distros.

LinuxSecurity.com Team
Mar 19, 2010

Drupal 5 & 6: Advisory for Email Filter, Critical Code Injection Risk

The Drupal team has just released a whole heap of security advisories. Drupal's Email Input Filter, Keys and Tag Order modules all contain security vulnerabilities. Updated versions, in which the problems are fixed, are now available. Only Email Input Filter and Tag Order for Drupal 5 and 6 and Keys for Drupal 6 are affected.

LinuxSecurity.com Team
Mar 19, 2010

Exploring Samba Security Modes and Authentication Techniques

If you have read any of the Samba content here on Ghacks you probably will have noticed that within the smb.conf configuration file a line that begins with security =. This is a very important part of Samba setup and generally the section that gives users the most problems. Although the security mode would seem fairly straight-forward, it is certainly worth explaining.

LinuxSecurity.com Team
Mar 18, 2010

SpamAssassin: Critical Advisory for Milter Code Execution Vulnerability

The SpamAssassin Milter plug-in which plugs in to Milter and calls SpamAssassin, contains a security vulnerability which can be exploited by attackers using a crafted email to inject and execute code on a mail server. The SpamAssassin Milter plug-in is frequently used to run SpamAssassin on Postfix servers.

LinuxSecurity.com Team
Mar 18, 2010

Understanding Virtualization Security: Strategies for Hypervisors and Hosts

Virtualization platforms are software. All software has flaws. Therefore, virtualization platforms have flaws. Simple logic,right? The major virtualization platform vendors, VMware, Xen (now Citrix), and Microsoft, have all had several vulnerabilities over the last few years. However, the major components of a virtualization infrastructure and the IT strategy related to deployment and maintenance of virtualization technologies can be planned and secured fairly well. The following sections will explore the major areas of concern for security professionals.

LinuxSecurity.com Team
Mar 16, 2010

Ways to Secure PHP5 Using Suhosin on CentOS 5.4 Server Environment

This tutorial shows how to harden PHP5 with Suhosin on a CentOS 5.4 server. From the Suhosin project page: "Suhosin is an advanced protection system for PHP installations that was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. Suhosin comes in two independent parts, that can be used separately or in combination.

LinuxSecurity.com Team
Mar 15, 2010

Apache 2.2.14 Critical Advisory: Remote Control Bug Detected

IT security company Sense of Security has discovered a serious bug in Apache's HTTP web server, which could allow a remote attacker to gain complete control of a database. Discovered by the company's security consultant Brett Gervasoni, the vulnerability exists in Apache's core "mod_isapi" module. By exploiting the module, an attacker could remotely gain system privileges that would compromise data security.

LinuxSecurity.com Team
Mar 12, 2010

Exploring Security Risks of Virtualization on Shared Platforms

A few years ago I wrote a paper for SANS titled

LinuxSecurity.com Team
Mar 12, 2010

Apache 2.2.15 Security Advisory: Critical SSL Flaw Mitigation

The Apache HTTP Web Server is the most widely deployed Web server on the Internet today, which means that vulnerabilities in the open source server can have a devastating impact. That also makes security updates like the new 2.2.15 release critical, since it addresses several security vulnerabilities in Apache's flagship HTTP Web server.

LinuxSecurity.com Team
Mar 09, 2010

F5 Networks And Infoblox Integrated DNS Security Announcement

F5 Networks and Infoblox announced on Monday what they claim is the first integrated solution that combines DNS Security Extensions key management and signing capabilities with global server load balancing to boost performance.

LinuxSecurity.com Team
Mar 02, 2010

Top 5 Tools to Boost Performance of Your Linux Operating System

Out of the box, Linux runs just fine for many uses. But if you find yourself needing to ferret out performance problems or tune the kernel for better performance, Linux has more than enough tools to measure and tweak system performance. In this guide, we'll take a look at five of the best utilities to measure system performance and tweak the Linux kernel.

LinuxSecurity.com Team
Mar 02, 2010

Stack Smashing Protection in Debian: GCC v4.1 Security Enhancement

Here's an older article on programming security, but still very useful. Is this something you ever considered to be a concern for your systems in the past? Since we last covered the use of Stack Smashing Protection (SSP) the default compiler for Debian Sid has been upgraded to include it, with no need for custom patching. Read on for a brief demonstration of how it can be used to prevent attacks.

LinuxSecurity.com Team
Mar 01, 2010

Understanding Chuck Norris Botnet Impact on Router Security and Linux

Get a grip people. A recent story about the so-called Chuck Norris botnet implies that it breaks Linux's security. Wrong. Windows malware, whether it comes in the form of a Trojan, virus, or worm, works by exploiting security holes in either the operating system itself or an application like Adobe Reader or Internet Explorer.

LinuxSecurity.com Team
Feb 24, 2010

NetBSD 5.0.2 Security Advisory: Issues with TLS Session Renegotiation

The NetBSD development team have announced the release of the second "critical/security" update of the 5.0 release branch, NetBSD 5.0.2. The latest maintenance release includes a number of important security and stability fixes for the BSD based operating system.

LinuxSecurity.com Team
Feb 16, 2010

Community Poll

More Polls

Server Security - Page 13

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security