Server Security - Page 42 - Results from #820

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Windows NT/2000 Lower Vulnerabilities Compared To Linux Distributions

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Update: vnunet updates report with "Controversy brews in Linux camp". Windows suffered fewer security vulnerabilities than Linux last year, according to figures released by vulnerability tracker SecurityFocus. Although the statistics so far only go up to August 2001, aggregated distributions of . . .

LinuxSecurity.com Team
Feb 04, 2002

Enhancing Email Security With Qmail-Scanner For Scanning Content

Jason Haar dropped us a note to inform us of the qmail content scanner. "Qmail-Scanner is an addon to Qmail that enables a Qmail Email server to scan all gatewayed Email for certain characteristics (i.e. a content scanner).. . .

LinuxSecurity.com Team
Jan 30, 2002

Enhancing Linux Security with Jay Beale’s Insights on System Hardening

Jay Beale, the lead developer of Bastille Linux and an independent security consultant, says it's not the Unix-based systems with interesting stuff on them that get hacked, it's the vulnerable ones. And if you're not prepared to tighten up what you . . .

LinuxSecurity.com Team
Jan 29, 2002

Buffer Overflows In Sudo And efax: Critical Security Concerns

In this column, we look at buffer overflows in clanlib, efax, LibGTop, and icecast-server; and problems in sudo, at, cdrdao, Conectiva Linux's MySQL, Open UNIX and UnixWare 7 xterms, Red Hat's Secure Web Server, Mandrake's BIND, xchat, klprfax_filter, and an HP-UX denial-of-service attack.. . .

LinuxSecurity.com Team
Jan 23, 2002

Configuring OpenSSH for Maximum Network Security in Solaris

Networks have never been secure. As the demand on open networks for remote access has grown, the risks of compromised systems and accounts has kept pace. Tools for securing networks, such as OpenSSH, were developed to counter the threats of password . . .

LinuxSecurity.com Team
Jan 23, 2002

Surge in Port 12345 Traffic Sparks Security Warnings About NetBus Trojan

Increased activity on TCP port 12345 -- best known as both the NetBus Trojan's default port and the port used for a Trend Micro antivirus product -- has the security community arguing as to who is responsible. Is it Trend Micro . . .

LinuxSecurity.com Team
Jan 22, 2002

ProFTPD: 111115 Critical DoS and Buffer Overflow Issues

In this column, we look at several problems with ProFTPD; a Trojan Horse application disguised as an exploit; buffer overflows in the glibc library, dtspcd, wmcube-gdk, and Mandrake Linux's Kerberos telnet; and problems in Slash, IBM Websphere, popauth, Aftpd, TWIG, PGPMail.pl, . . .

LinuxSecurity.com Team
Jan 18, 2002

Understanding Linux Packet Filter And Kernel Processing Insights

In Part I of this two-part series on the Linux Packet Filter, Gianluca describes a packet's journey through the kernel. Network geeks among you may remember my article, ``Linux Socket Filter: Sniffing Bytes over the Network'', in the June . . .

LinuxSecurity.com Team
Jan 15, 2002

Sudo 1.6.4 Major Improvements: User Management And Security Fixes

There are some thing I had promised for the next release that are not in 1.6.4 due to the large changes in the parser that these changes require to work properly. Nonetheless this release does fix the majority of problems . . .

LinuxSecurity.com Team
Jan 14, 2002

Utilizing Procmail's Logging On FreeBSD For Effective Spam Filtering

In the last article, we installed the procmail utility and generated a few basic recipes. This week, let's start by looking at procmail's built-in logging mechanism. We'll then take a look at some other available resources that build on procmail's capabilities.. . .

LinuxSecurity.com Team
Jan 14, 2002

NRC Evaluates Cybersecurity: Importance of Routine Penetration Testing

To defend themselves against a rising tide of electronic attacks, companies, agencies and other organizations should routinely try to crack their own secure systems, according to a report released today. To ensure cybersecurity, individual organizations should "conduct frequent, unannounced red-team penetration . . .

LinuxSecurity.com Team
Jan 08, 2002

Exploring Microsoft Windows Security Issues Affecting .NET Adoption

Although Microsoft has said that Windows XP is its most secure operating system that it has ever developed, security issues found within Windows 98, ME, and XP suggest that this statement doesn't hold much water. I wonder how issues such as these will affect adoption rates of .NET, where security is of the utmost importance.. . .

LinuxSecurity.com Team
Jan 02, 2002

Cross-Site Scripting in CERT Advisory 2000-02: Key Threat Insights

The vulnerability itself, CERT Advisory 2000-02, sometimes called cross-site scripting or malicious tagging, takes advantage of dynamically generated Web pages. Basically, a malicious script, which could be written in a number of different languages, can be inserted as input into dynamically . . .

LinuxSecurity.com Team
Dec 31, 2001

Strategies To Combat Spam And Protect Your Mailbox And Server

Freeloading commercial emailers do more than fill your mailbox with unsolicited email. They also steal server time and network bandwidth, and have even crashed mailservers. And if your mail server can be used as a relay for spam, you may find your site "blackholed", cut off from sending email to many sites, in addition to getting thousands of angry email messages from the victims of the spam. . . .

LinuxSecurity.com Team
Dec 27, 2001

Windows XP: 2001 Security Advisory on UPnP Exploit Risk

The latest Microsoft bug is a doozy. Why do these things keep cropping up? The federal government and technology industry want you to believe the threats to our networks are external, not internal, where someone must be held accountable when things go wrong. Thus, we hear the rhetoric about cyberterrorists, hackers, and the so-called 'Digital Pearl Harbor' - things you can't easily point fingers at and hold someone accountable for when bad things happen.. . .

LinuxSecurity.com Team
Dec 26, 2001

Enhance Workplace Efficiency By Reducing Unwanted Spam Emails

The problem: too much spam. Unsolicited advertising email continues to account for untold business losses each year. To give you an idea of the scope of the problem, in 1998 AOL reported that of the approximately 30 million email messages its . . .

LinuxSecurity.com Team
Dec 23, 2001

Five Steps To Establish Effective Enterprise Security Baseline

Don't believe anyone who tells you he has the secret to enterprise security--the problem is far too big for any one service or product or practice to fix. But there are five definite steps you should take to establish a security baseline and set parameters for further and industry-specific security measures.. . .

LinuxSecurity.com Team
Dec 15, 2001

Exploring Linux And BSD: Security Measures And Stability Analysis

A good case can also be made that Linux is inherently more stable and secure than Microsoft products, either because it's based on a better core of code or because it's open source, and many individuals have a stake in monitoring and making repairs.. . .

LinuxSecurity.com Team
Dec 14, 2001

Combatting Spam Effectively with Vipul's Razor: A Unified Approach

There are few things in life that annoy me as much as spam -- and I'm not talking about the canned meat by-product variety. Unsolicited ads are annoying in any form, but the nature of spam is parasitic as well: it steals time and bandwidth. So, for my money, anything that helps defeat spam is a Good Thing.. . .

LinuxSecurity.com Team
Dec 13, 2001

OpenSSH: Critical Local Code Execution Risk Identified - Upgrade Required

A new vulnerability in OpenSSH can, under some circumstances, be exploited by a local attacker to execute arbitrary code with the permissions of the root user. Exploiting this vulnerability requires that the "UseLogin" option be enabled, which most systems do not configure in the default installation. The vulnerability affects OpenSSH versions earlier than 3.0.2.. . .

LinuxSecurity.com Team
Dec 10, 2001

Community Poll

More Polls

Server Security - Page 42

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security