Server Security - Page 43 - Results from #840

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Strategies To Avoid Security Holes In CGI Script Development

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This article is the first one in a series about the main types of security holes in applications. We'll show the ways to avoid them by changing your development habits a little. This set of articles shows methods which can be . . .

LinuxSecurity.com Team
Dec 10, 2001

Procmail Email Management: Build, Configure, And Automate

In today's article, I'll build and configure procmail and get you started on a few basic recipes. In next week's article, I'll continue with some more complicated recipes and look at procmail's logging features.. . .

LinuxSecurity.com Team
Dec 07, 2001

Understanding the Importance of Secure Logging for System Integrity

A commonly used technique among computer crackers, and experienced thieves as well, is to erase their fingerprints from the crime scene. This usually means erasing or modifying the logs stored on the computer that will expose them if carefully examined. Unprotected . . .

LinuxSecurity.com Team
Dec 04, 2001

The Vulnerability Life Cycle: Research, Disclosure, and Exploit Phases

The vulnerability life cycle has three phases: the research/discovery phase -- in which both malicious and nonmalicious security researchers seek new holes in products; the disclosure phase -- in which the discoverer of the new vulnerability tells others about it; and . . .

LinuxSecurity.com Team
Nov 26, 2001

Proxy Servers: Access and Speed Optimization Using Squid

At its simplest, a proxy server is a computer that accepts your requests for websites, makes the requests on your behalf (read: by proxy), and returns the results to you. With a proxy server, your Web browser never actually accesses any computers on the Internet. Web access is not all a proxy server can provide. Most proxy servers can proxy access to any Internet service. This means we can monitor FTP transfers and telnet sessions as well as Web browsing.. . .

LinuxSecurity.com Team
Nov 25, 2001

Effective Security Practices for PHP Scripts With Safe Mode Strategies

The way to secure PHP scripts is through a carefully selected combination of configuration settings and safe programming practices. Based on the vulnerabilities that we have studied so far, we will now set forth to establish some rules that can help avoid dangerous situations. . . .

LinuxSecurity.com Team
Nov 14, 2001

Red Hat DDoS Warning: Limpninja Trojan Targets SSH Exploits

Security watchers are speculating that hackers familiar with the ways of the ninja may be attempting to construct a distributed denial of service (DDos) network on compromised Secure Shell Hosts (SSHs). Threads on security newsgroups have suggested that hackers may be . . .

LinuxSecurity.com Team
Nov 13, 2001

vsftpd: 1.0 Release Details On Security And Scalability

Chris Evans, author of the "very secure" FTP daemon, has released version 1.0 of his software. The previous version included bandwidth control. Chris writes, "vsftpd is also extremely fast and scalable. vsftpd has achieved ~4000 concurrent users on a single machine, in a production environment.". . .

LinuxSecurity.com Team
Nov 12, 2001

Imp Webmail Advisory: Session Hijacking Exploit Threatens Security

Joao Pedro reports that "It's possible to hijack an imp/horde session using a cross-site script attack, quite similar to the one explored by Marc Slemko in his "Microsoft Passport to Trouble" paper.". . .

LinuxSecurity.com Team
Nov 12, 2001

CERT Reveals Printer Network Security Risks with DoS Threats

A search for one kind of problem led analysts at the CERT Coordination Center to find another. In August, the security organization had begun to contact vendors to get lpd codes from the makers of various printers in an attempt to . . .

LinuxSecurity.com Team
Nov 07, 2001

Overview of PHP Security Issues and Best Practices for Safe Development

This article will provide you an overview of various security issues with PHP and offer advice on secure PHP programming practices. PHP has achieved a stable and solid presence on the Web in the last several years, and its popularity as . . .

LinuxSecurity.com Team
Nov 07, 2001

Fingerprinting Attacks on Port 80: Exploring Threats and Mitigation

bob writes, "CGIsecurity.com recently wrote a paper on fingerprinting port80 attacks." These holes can allow an attacker to gain either administrative access to the website, or even the web server itself. This paper looks at some of the signatures . . .

LinuxSecurity.com Team
Nov 06, 2001

Apache 2.0: Memory Leak And DoS Summary - Two DoS Attacks Identified

Two denial of service attacks were found in the Apache 2.0 code this week - both concerned with memory usage when sending large requests. The first was that the server did not respect the maximum header field length, and would consume memory indefinitely while reading a header line.. . .

LinuxSecurity.com Team
Nov 02, 2001

Dave Dittrich Responds to Claims About Raw Sockets in WinXP

Dave Dittrich, best known for his Honeynet and DDoS expertise, responds to claims made by Steve Gibson claiming that "raw sockets are the devil" in the latest OS by Microsoft. Dave writes, "Steve Gibson is *still* pushing "raw sockets are the devil?" Anyone (especially journalists) who are interested in this topic had best look into the details, not just take what Steve tells them.". . .

LinuxSecurity.com Team
Oct 25, 2001

Revamping Security Admin for Increased Protection Against Digital Threats

Firms should revamp their security admin rather than just avoiding Microsoft products, warns expert. Firms are being advised to tighten up on security administration rather than switch from Microsoft software to open source operating systems, as fears . . .

LinuxSecurity.com Team
Oct 20, 2001

Key Security Practices Every System Administrator Must Implement

System administrators are no longer alone in their concern for security. The increase in high-profile virus attacks, and a general sense of heightened security, means that executives are likely to have security on their mind. It may be easier than ever . . .

LinuxSecurity.com Team
Oct 19, 2001

Analysis of Windows XP: Stability Challenges and Security Risks

According to security experts, Windows XP may give users more control and customization, but the new OS may also bring more risk. The latest operating system from Microsoft (Nasdaq: MSFT) is winning praise for its stability and functionality, but . . .

LinuxSecurity.com Team
Oct 16, 2001

Web Server Attacks Double: 48% of Organizations Affected in 2021 Survey

Web server attacks have doubled over the course of the last year, despite increased spending on security. That's the main conclusion of a survey of more than 2,500 organisations, sponsored by security firms TruSecure and Predictive Systems. The survey found that . . .

LinuxSecurity.com Team
Oct 12, 2001

Exploring Bsd Security Essentials: Insights From ToorCon 2001

Subterrian.net has a copy of the presentation delivered by Sean Lewis at ToorCon 2001, held last weekend in San Diego, Calif. Lewis discusses BSD essential BSD security issues, working well as a primer for new and experienced users alike. Read all . . .

LinuxSecurity.com Team
Oct 05, 2001

RAZOR: Sendmail 8.12.0 Critical: Local Attacks and Information Loss

The Sendmail mail delivery subsystem is vulnerable to multiple local attacks that lead to information loss, information leaks and mail system compromise. The mail system privileges compromise affects Sendmail 8.12.0. Other problems affect all versions up to 8.12.0.. . .

LinuxSecurity.com Team
Oct 01, 2001

Community Poll

More Polls

Server Security - Page 43

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security