Server Security - Page 45 - Results from #880

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Quake III Arena 1.29f/g High-Risk Buffer Overflow Security Flaw in Server

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

A security flaw involving the server software that allows Quake III players to play the popular shoot-them-up over a network has been reported. According to a posting on respected security mailing list BugTraq, a buffer overflow vulnerability in Quake III Arena . . .

LinuxSecurity.com Team
Aug 02, 2001

Private and Authenticated Communication in Internet Security

The focus of Internet security is to ensure private, authenticated communications between parties over the Internet or Intranets. Many of the security requirements are not that different from the requirements within a closed system complex. A closed system complex, however, may . . .

LinuxSecurity.com Team
Aug 02, 2001

Apache HTTP Server: Examining Two Decades Of Security Performance

The Apache Software Foundation Inc.'s Apache HTTP Server has earned what many hope for and few achieve: an enviable security reputation. This achievement is especially striking when contrasted with Microsoft Corp.'s IIS (Internet Information Services) Web server (see story), which has . . .

LinuxSecurity.com Team
Jul 24, 2001

Understanding DNS Security: Key Insights from O'Reilly's Guide

This article is a link to the contents of DNS Security Chapter of the O'Reilly DNS book. Why should you care about DNS security? Why go to the trouble of securing a service that mostly maps names to addresses? Let us . . .

LinuxSecurity.com Team
Jul 19, 2001

EnGarde Secure Linux 1.0.1 Review: Key Features Including SSL Integration

Patrick Mullen writes, "The Duke of URL has just posted its review of EnGarde Secure Linux 1.0.1. EnGarde Secure Linux is a unique brand of Linux with a focus on security, e-commerece, and servers. The review covers installation, its interface, and more.". . .

LinuxSecurity.com Team
Jul 18, 2001

Examining Effective Hardening Methods for FreeBSD Operating Systems

Hardening BSD is definitely trickier than hardening a Linux based workstation being that the top 3 distributions of BSD, Net, Open, Free, have done an excellent job of strengthening the systems on their own. Using FreeBSD at home while I write . . .

LinuxSecurity.com Team
Jul 17, 2001

MAPS Service Transition: Subscription Changes Effective July 31, 2001

Economic conditions and an apparent decision to start a fee-based service will force access to MAPS services to cease. A post from mail-abuse.org to the net-abuse.email newsgroup has started some controversy over MAPS' intentions, finding replacements for their service, and basically what should be done next.. . .

LinuxSecurity.com Team
Jul 13, 2001

Essential Guidelines for Secure PHP Server Installation and Configuration

The following article tries to explain how to use PHP on your server in a secure manner. This includes how to safely install it, remove samples and set up security specific options. It is very important to make sure that the . . .

LinuxSecurity.com Team
Jul 10, 2001

USENIX Summary: Linux Kernel Hooks for Security Policies Discussion

Emily Ratliff posted a summary of the recent USENIX "Birds of a Feather" (BOF) discussion about the Linux Security Module effort. This effort is trying to devise a set of Linux kernel hooks to support "plugging in" to Linux support for advanced security policies.. . .

LinuxSecurity.com Team
Jul 02, 2001

Benefits of VPN and Tripwire Tools in Linux Security Exploration

Now, in this short series of articles, I'm going to delve deeper into Linux security and discuss protective measures such as VPN systems and tripwire. Even though I'm aware of the many different security analysis tools out there, I'm not experienced . . .

LinuxSecurity.com Team
Jun 25, 2001

Boost Web Security on Apache Using mod_ssl and SSL/TLS Integration

As we covered in the last article, SSL/TLS (Secure Socket Layer/Transport Layer Security) are the protocols used to add encryption and authentication to TCP/IP and HTTP. In this article we'll cover the most popular open source method of adding SSL/TLS to a web server. Adding mod_ssl to Apache.. . .

LinuxSecurity.com Team
Jun 24, 2001

Samba Security Advisory: Root Access Risk Fix and Interim Mitigation

A serious security hole has been discovered in all versions of Samba that allows an attacker to gain root access on the target machine for certain types of common Samba configuration. Until all vendors have released updates, there is an interim workaround available. . . .

LinuxSecurity.com Team
Jun 23, 2001

How Tripwire For Web Pages Boosts Website Security Effectively

This is a great security utility to be sure, but what about non-system files like those that constitute your Web site? Never fear: Tripwire, in partnership with Covalent, has recently released Tripwire for Web Pages into its security software stable. Tripwire . . .

LinuxSecurity.com Team
Jun 20, 2001

Windows XP Raw Socket Threat: Security Risks Analyzed by Steve Gibson

Security specialist Steve Gibson has created quite a fracas with his increasingly vocal opposition to the raw-socket connectivity planned for Windows-XP, and upon which he bases predictions of impending chaos for the entire Internet, so he's decided to exploit the very threat he claims will make the Internet permanently unstable.. . .

LinuxSecurity.com Team
Jun 12, 2001

BIND 9.1.2 High Risk: Inadvertent Local Exposure of HMAC-MD5 Keys

A flaw exists in the dnskeygen utility under BIND version 8 and the dnssec-keygen utility included with BIND version 9. The keys generated by these utilities are stored in two files. In the case of HMAC-MD5 shared secret keys that are used for dynamic updates to DNS servers, the same secret keying material is present in both files. Only one of the files is configured by default with strong access control. The resulting exposure may allow unauthorized local users to obtain the keying information. This may allow attackers to update DNS servers that support dynamic DNS updates.. . .

LinuxSecurity.com Team
Jun 12, 2001

Exploring IT Security Parallels With Meat-Packing and Navigation Insights

IT security has a lot in common with the meat-packing plants of 150 years ago or sailing a ship across the oceans in the 1700s, said Gene Kim, chief technology officer of Tripwire, in a speech Thursday at The Internet Security . . .

LinuxSecurity.com Team
Jun 11, 2001

Protecting Java Code from Decompiler Threats and Techniques

ava programs are especially vulnerable to decompilers, because Java source code is compiled to Java bytecode. But there are techniques to make decompilation harder. It is a difficult prospect to take machine level code and translate it backwards into language level . . .

LinuxSecurity.com Team
Jun 11, 2001

RAZOR: Mod Risk Advisory for Sendmail Unsafe Signal Handling

Sendmail signal handlers used for dealing with specific signals (SIGINT, SIGTERM, etc) are vulnerable to numerous race conditions, including handler re-entry, interrupting non-reentrant libc functions and entering them again from the handler (see "References" for more details on this family of vulnerabilities). This set of vulnerabilities exist because of unsafe library function calls from signal handlers (malloc, free, syslog, operations on global buffers, etc).. . .

LinuxSecurity.com Team
May 29, 2001

Discover Amanda Backup: A Powerful Open Source Solution

In the quest for world domination it's important not to forget your backups. And, in the world of backup software, Amanda rocks. Amanda runs from the inetd daemon and can backup multiple clients to a single backup server. It streams backup . . .

LinuxSecurity.com Team
May 13, 2001

Comparing Linux and Windows Security Risks for Corporate Data Security

While proponents of Linux systems maintain that the many security vulnerabilities and attacks coming to the fore are due to Microsoft's dominance in the market and its inherent vulnerabilities, others believe that Bill Gates' behemoth company is beginning to hold its . . .

LinuxSecurity.com Team
May 09, 2001

Community Poll

More Polls

Server Security - Page 45

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security