Server Security - Page 47 - Results from #920

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

IT Managers Struggling to Secure Funding Against Cyber Threats

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

... IT managers and CxOs already understand the value of strong security practices, right? Wrong. Apparently, the message isn't hitting home. Even with the constant barrage of security talk spewed by media and marketers, IT managers can't get upper management to . . .

LinuxSecurity.com Team
Feb 19, 2001

Addressing Application Security Gaps: Preventing Defects in Development

This article is the first one in a series about the main security holes that can usually to appear within an application. Along these articles, we'll show the ways to avoid them by changing a little the development habits. It doesn't . . .

LinuxSecurity.com Team
Feb 18, 2001

Enhancing BSD Security: Managing inetd and Daemons Effectively

Let's continue where we left off by taking a closer look at /etc/inetd.conf. Remember that inetd is the internet super-server which listens for requests on behalf of other daemons; it reads /etc/inetd.conf to determine which ports you wish it to listen . . .

LinuxSecurity.com Team
Feb 13, 2001

BIND: Critical Buffer Overflow Advisory for Versions 4 and 8 Affecting DNS

Among BIND, there were several other vulnerabilities this week. "Buffer-overflow problems have been found in versions 4 and 8 of BIND, a domain-name-system daemon distributed by the Internet Software Consortium (ISC). This vulnerability has wide implications as most sites on the . . .

LinuxSecurity.com Team
Feb 07, 2001

BIND 4.9.7-OW5 and 4.9.8-OW1 Moderate: Infoleak and Complain Bug

Solar Designer has updated his OpenWall patches for BIND 4.9.7 and BIND 4.9.8. COVERT Labs at PGP Security has published a security advisory on a number of BIND vulnerabilities:. . .

LinuxSecurity.com Team
Jan 29, 2001

High Assurance Software Opportunities Through NSA's Open Source Release

There are two things I am sure of after all these years: there is a growing societal need for high assurance software, and market forces are never going to provide it. Superficially, I'm going to offer a few comments on the technology underlying the NSA release. My real intent is to induce the Open Source community into building on this release--so when society wakes up to the fact that this stuff is really, truly needed, something is actually there. . . .

LinuxSecurity.com Team
Jan 27, 2001

Protecting Your Linux Server from Internet Threats: Key Strategies

Connecting a computer to the Internet can be dangerous business. Just ask Troy Hall. Three months ago, the experienced system administrator put his newest Linux server online. Three days later, an intruder had taken control of it.

LinuxSecurity.com Team
Jan 24, 2001

Pipex Email Outage: Severe Spam Attack Disrupts Service for Users

In what some see as a perfect example of the evidence of cosmic retribution, an avalanche of spam has crashed British Internet service provider Pipex's servers, and stopped delivery of e-mail to its million-plus users for the past week. . . .

LinuxSecurity.com Team
Jan 18, 2001

Glibc Buffer Overflow and ReiserFS Security Advisory Overview and Details

Problems this week include a problem with glibc, a possible problem with ReiserFS, a buffer overflow in exrecover, a stack overflow in arp, temporary file race conditions in a long list of programs, and a back door in Borland InterBase. . . .

LinuxSecurity.com Team
Jan 16, 2001

Implementing Process Accounting on BSD Systems with Lastcomm and SA

This document discusses implementing process accounting on a BSD system. The paths may be slightly different on a Linux system, but it's otherwise the same. "Over a year ago, I had an interesting job of tracking down how a root superuser . . .

LinuxSecurity.com Team
Jan 15, 2001

Bolstering Linux Defense Through TCP Wrappers and OpenSSH Strategies

Trevor Warren writes: "This second article in the series takes you through TCP wrappers, OpenSSH, disabling unnecessary services and better monitoring of system activity by using unique log files to monitor specific information."

LinuxSecurity.com Team
Jan 15, 2001

Secure iXplorer Overview: A Tool For Apache Admins' File Transfers

This is the first-part in a series of articles about different options for secure file transfers. I won't cover how to sniff connections, steal passwords or if SSH is really "secure". But hopefully, I can provide some information that will be . . .

LinuxSecurity.com Team
Jan 14, 2001

Ebusiness And Security Gaps In Blue-Chip Firms Analysis

Fewer than half of blue-chip companies believe that their ebusiness and security strategies are effectively coordinated. Business managers are guilty of demanding ebusiness at all costs and security is overlooked, according to research by analyst group Xephon. . . .

LinuxSecurity.com Team
Jan 12, 2001

Borland InterBase: Security Advisory on Back Door Access Risk

Borland's InterBase database software contains a "back door" that allows anyone with the appropriate password to wreak major havoc with the database and the computer it's running on, security experts said. A back door is an undocumented way to get access . . .

LinuxSecurity.com Team
Jan 11, 2001

NSA Releases Prototype For Security-Enhanced Linux Development

The U.S. National Security Agency last week publicly released a prototype "security-enhanced Linux" operating system, hoping to attract the developer community to find ways to improve Linux security for business and governmental uses. So how is the developer community reacting so . . .

LinuxSecurity.com Team
Jan 10, 2001

Emerging PHP Hypertext Risks Loom Over Ecommerce Security Concerns

A potential threat to ecommerce sites has been identified with the discovery of the first virus using the hypertext preprocessor (PHP) scripting language. PHP is one of the most popular scripting languages and is used to develop ecommerce sites and those . . .

LinuxSecurity.com Team
Jan 10, 2001

Attrition Report: NT and Linux Compromises in Web Server Security

This article, based on a recent attrition.org report, doesn't mention how many hacked sites were due to default passwords, poor administration, etc. The numbers couldn't possibly be not telling the whole story now, could they. "The year 2000 saw Windows NT . . .

LinuxSecurity.com Team
Jan 09, 2001

Revolutionary E-Business Solutions Enhanced Through Linux Innovations

Don't look now, but e-business is growing webbed feet. E-commerce, e-procurement networks, B2B partnerships, e-marketplaces--they're all ripe for exploitation by Linux, the upstart OS sporting the penguin logo. Linux is already a force in Web serving, Internet security and e-mail, both . . .

LinuxSecurity.com Team
Jan 02, 2001

Assessing Server Protection Through the CIS Security Rating Framework

The newly formed Center for Internet Security hopes to answer that question by creating a suite of tests that would give computer owners a rating--on a scale of 1 to 10--of how good their security is. A level-10 server could protect . . .

LinuxSecurity.com Team
Dec 22, 2000

OpenBSD: Urgent Advisory for ftpd Buffer Overflow Threat and Remote Access

An esoteric buffer overflow bug in OpenBSD has been upgraded in importance after it was discovered that, in certain conditions, it could allow a cracker to gain remote access to a server. Users are recommended to apply a patch to fix . . .

LinuxSecurity.com Team
Dec 20, 2000

Community Poll

More Polls

Server Security - Page 47

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security