Server Security - Page 15 - Results from #280

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Linux Kernel: Root Access Advisory Due to Null Pointer Dereference

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A null pointer dereference in the Linux kernel can be exploited to access a system at root privilege level. The hole is reportedly contained in pipe.c and can occur in certain circumstances when using the pipe_read_open(), pipe_write_open() or pipe_rdwr_open() functions while releasing a mutex (mutual exclusion) too early

LinuxSecurity.com Team
Nov 04, 2009

Prevent SQL Injection Attacks: Key Strategies for Developers

New Dark Reading report explores what database developers and database administrators can do about the pervasive SQL injection attack.

LinuxSecurity.com Team
Nov 03, 2009

The 10 Most Common Email Errors of 2009: Risks and How to Fix Them

E-mail, the Internet's first killer app, can injure companies and individuals when not used with care. In its attempt to document the risks of electronic messaging and to make the case for the value of its services, Proofpoint, an e-mail security company, has assembled a list of what it considers are the "Top 10 Terrifying E-mail Blunders of 2009."

LinuxSecurity.com Team
Oct 30, 2009

WordPress 2.8.5 Hardening Release: New Security Features Implemented

Today one of our readers sent an interesting post from the developers of WordPress. It is about a just released version 2.8.5. This version is called as the "Hardening Release", which I thought was quite great! According the post, these were new security features from the new 2.9 series that they decided to backport to the 2.8.x tree.

LinuxSecurity.com Team
Oct 22, 2009

Improving Database Security Compliance: Six Essential Steps

In a sea of compliance initiatives, database security is often overlooked. But experts say no matter what the regulations say, securing the database is a critical part of any compliance effort.

LinuxSecurity.com Team
Oct 12, 2009

First Root Server Signatures Improve DNS Security with DNSSEC

Joe Abley of ICANN and VeriSign manager Matt Larson announced, at the 59th meeting of the "R

LinuxSecurity.com Team
Oct 07, 2009

Insights on Insider Threats and User Risks for Database Protection

In all of their frenzy to protect sensitive data from hackers and thieves, many organizations overlook the most likely threat to their databases: authorized users.

LinuxSecurity.com Team
Oct 02, 2009

Safely Connect to Remote Servers through SSH Tunneling and Netcat

Vincent Danen explains how to use netcat with SSH tunneling when you need to create a secure connection to a server from a remote location.

LinuxSecurity.com Team
Sep 29, 2009

Websense Report Highlights 671% Surge In Web Malware Threats

The growing threat to businesses from the web was put into sharper focus today, after security vendor Websense reported a whopping 671 per cent rise in the number of malicious sites during the past year.

LinuxSecurity.com Team
Sep 16, 2009

FreeBSD 6.0-6.4: Local Root Access Risk in kqueue Notification Interface

A security researcher has uncovered a security bug in the FreeBSD operating system that allows users with limited privileges to take full control of underlying systems.

LinuxSecurity.com Team
Sep 14, 2009

Debian 5.0 & Fedora 10/11 Critical: Kernel Privilege Escalation Fix

The Linux developers have released kernel versions 2.6.27.30 and 2.6.30.5 which fix a critical vulnerability revealed last week. The vulnerability, which is found in all 2.4 and 2.6 series Linux kernels since 2001 and for which there is already an exploit, allows users with restricted privileges to obtain root privileges. The developers urgently recommend users update to the new versions.

LinuxSecurity.com Team
Aug 19, 2009

Exploring the Importance of Sender Policy Framework in Email Security

Great article that talks about the effectiveness of Sender Policy Framework approach to stopping spam, and how effective it is.IT shops have thrown everything but the kitchen sink at the issue and more times than not, come up empty on long-term solutions. Lately we

LinuxSecurity.com Team
Aug 13, 2009

WordPress: Critical Update For Admin Password Access Issue

WordPress, the popular blogging software platform, has been updated to fix a flaw that could have enabled a hacker to change an administrator password. The bug enables a specially crafted URL to evade a password reset security verification check, Matt Mullenweg, founding developer of WordPress, said Wednesday on the organization's blog.

LinuxSecurity.com Team
Aug 13, 2009

Enhancing Database Administrators' Role in Protecting Data Security

In the past, database administrators weren't expected to do much with security. Their focus was on the speed, performance, and accuracy of the data. Security was a relatively low priority. Recently, however, that prioritization has begun to shift.

LinuxSecurity.com Team
Aug 07, 2009

WordPress 2.8.3 Critical Advisory: Privilege Escalation Threat

The 2.8.3 security update for WordPress fixes several privilege escalation vulnerabilities, similar to the problems fixed in a previous update to version 2.8. The developers had overlooked some of the loopholes which 2.8.3 now closes. The security service provider Core Security had warned of various security problems in WordPress before, after finding errors in processing certain URLs. For example, unprivileged, but registered users, are reportedly able to examine the configuration pages of plug-ins and to change their options.

LinuxSecurity.com Team
Aug 04, 2009

BIND9: Critical DoS Advisory - Remote Crash Issue and Exploits

A vulnerability in the popular open source BIND9 name server allows attackers to remotely trigger a server crash. According to the error report, a single specially crafted "dynamic update" packet is all that is required to prevent IP addresses from being translated into server addresses. Authorised name-servers use dynamic updates to add, or remove, resource records to, or from, a zone.

LinuxSecurity.com Team
Jul 29, 2009

Enhancing OpenSSH Server Security: 20 Best Practices For Safe Remote Access

OpenSSH is the implementation of the SSH protocol. OpenSSH is recommended for remote login, making backups, remote file transfer via scp or sftp, and much more. SSH is perfect to keep confidentiality and integrity for data exchanged between two networks and systems. However, the main advantage is server authentication, through the use of public key cryptography. From time to time there are rumors about OpenSSH zero day exploit. Here are a few things you need to tweak in order to improve OpenSSH server security.

LinuxSecurity.com Team
Jul 27, 2009

Joomla 1.5.13 Moderate XSS And Severe File Upload Risks Advisory

The Joomla developers have announced the release of version 1.5.13 of their content management system (CMS). The security update addresses a critical vulnerability in the Tiny browser included with the TinyMCE 3.0 editor that could allow files to be uploaded or removed without a user needing to be logged in. Version 1.5.12 is affected. Additional details, however, have not been provided.

LinuxSecurity.com Team
Jul 23, 2009

DD-WRT: Local Command Execution Under Management Interface Threat

The management interface of the current stable version of DD-WRT, the free router firmware, suffers a vulnerability that lets attackers run programs with root rights on the router. The vulnerability, described at milw0rm and in the DD-WRT forum, is caused by inadequate handling of meta-characters in the query string in DD-WRT's httpd web server. The server will then run programs even when no session is running.

LinuxSecurity.com Team
Jul 23, 2009

Trojan Attack Exposes Up to 74,000 FTP Logins: Security Incident

Security researchers have discovered a new Trojan that has harvested as many as 80,000 unique FTP server logins and is now beginning to target domains, injecting malicious scripts into compromised FTP sites.

LinuxSecurity.com Team
Jul 07, 2009

Community Poll

More Polls

Server Security - Page 15

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security