Server Security - Page 50 - Results from #980

Discover Server Security News

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 54

Warning: Undefined property: stdClass::$helix_ultimate_image in /var/www/www.linuxsecurity.com-443/html/templates/newsberg/html/com_content/category/blog_item.php on line 55

Best Practices to Secure Apache Virtual Hosts and Enhance Security

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Tips on securing apache for use with virtual hosts. "There is no best way to do this except to be paranoid about every detail, pay attention to security alerts and trust no one. Fortunately, Apache has some recommendations. Here is how . . .

LinuxSecurity.com Team
Jun 29, 2000

Implementing DAC and MAC for Apache Security Best Practices

This article discusses the various security mechanisms for apache. "... But what's all this noise about 'discretionary' and 'mandatory,' you ask? Put simply, discretionary control (DAC) mechanisms check the validity of the credentials given them at the discretion of the . . .

LinuxSecurity.com Team
Jun 29, 2000

Immunix OS 6.2 Features Advanced System Integrity and Security Tools

"Immunix" is a family of tools designed to enhance system integrity by hardening system components and platforms against security attacks. The Immunix OS is a Linux platform hardened with the Immunix tool set. Immunix works by hardening existing software . . .

LinuxSecurity.com Team
Jun 22, 2000

BIND 8.2.x Critical: Buffer Overflow Attack and Exploit Details

Here is an information bulletin that was issues by CIAC last Tuesday. It covers a BIND buffer overflow that exists in 8.2, 8.2.1 and 8.2.2. Here CIAC explains how the exploit works, "The exploit requires two systems to be . . .

LinuxSecurity.com Team
Jun 16, 2000

Configuring Apache Server For E-Commerce Security With SSL, MySQL, And PHP

This article discusses the use of mod_ssl, OpenSSL, RSARef, MySQL and PHP to develop a secure web server. "Our objective is to install a web server that will allow us to host sites, that would be secure for e-commerce . . .

LinuxSecurity.com Team
Jun 09, 2000

Building An E-Commerce Site: Catalogs, Carts, And User Experience

In this installment, we add scripts to let the user browse our product catalog and we let them order our products. After completing this installment, you will have experience navigating the product catalog, viewing product details, managing the shopping cart, . . .

LinuxSecurity.com Team
Jun 09, 2000

Linux Kernel 2.2.15 Security Advisory: Local Root Access Risk

A serious bug has been discovered in the Linux kernel that can be used by local users to gain root access. The problem, a vulnerability in the Linux kernel capability model, exists in kernel versions up to and including version 2.2.15. According to Alan Cox, a key member of the Linux developer community, "It will affect programs that drop setuid state and rely on losing saved setuid, even those that check that the setuid call succeeded."To ensure that this vulnerability cannot be exploited by programs running on Linux, Linux users are advised to update to kernel version 2.2.16 immediately. Information on "capabilities" are discussed in the Capabilities FAQ We also recently ran a story on a capabilities-based operating system that is worth reading.

LinuxSecurity.com Team
Jun 08, 2000

FreeBSD, NetBSD, OpenBSD IPCS Denial of Service Advisory

This advisory is for all 386BSD-derived OSes, including all versions of FreeBSD, NetBSD and OpenBSD. "An unprivileged local user can cause every process on the system to hang during exiting. In other words, after the system call is issued, no . . .

LinuxSecurity.com Team
Jun 08, 2000

NetBSD Security Advisory: Password Compromise for Developer Access

Developers of the NetBSD open source operating system say a recent security breach did not compromise the software's source code. NetBSD developer and project spokesman Charles Hannum has confirmed that a key developer's password was "discovered" by outsiders.

LinuxSecurity.com Team
Jun 07, 2000

Securing Linux Servers: Physical And Network Hardening Techniques

This is a introductory article on securing your Linux server. It starts with physical security then briefly discusses network security. "Your objective is to add as many rings or layers as possible, making the potential cracker take more . . .

LinuxSecurity.com Team
Jun 06, 2000

UK Companies Strengthen Defense Against Cyber Security Risks and Threats

British Internet companies are increasingly turning to complexes capable of withstanding a nuclear onslaught in the battle against computer hackers and other threats, according to one security consultant. . . .

LinuxSecurity.com Team
Jun 01, 2000

Addressing Apache Configuration Challenges for E-Commerce Sites

This ApacheToday article discusses what issues are involved with Apache to configure an E-Commerce site. "So, E-Commerce is the buzzword, but how do you actually produce an E-Commerce site? ... Here's a quick guide to some of the issues . . .

LinuxSecurity.com Team
May 31, 2000

Sendmail: Crucial Patch for Vulnerable Killer Resume Worm in 8.9.x

Jose Nazario has updated the .cf/.mc patch on his mirror site to include "Killer Resume" and was kind enough to share the fix with us. The patch, designed to block the ILOVEYOU worm and related worm/virus medleys, works . . .

LinuxSecurity.com Team
May 31, 2000

NIPC: DDoS Tool Update For Mstream Detection Severity: Critical

The potential represented by the "mstream" Distributed Denial of Service (DDoS) exploit is a serious and continuing threat. This advisory provides an update to a previously delivered NIPC DDoS detection tool that now allows users to identify the presence of . . .

LinuxSecurity.com Team
May 26, 2000

Effective Secure Deletion Techniques for Data Recovery Prevention

With the use of increasingly sophisticated encryption systems, an attacker wishing to gain access to sensitive data is forced to look elsewhere for information. One avenue of attack is the recovery of supposedly erased data from magnetic media or random-access . . .

LinuxSecurity.com Team
May 25, 2000

Cracked Part 3: Tracking Down The Cracker In Unix Systems

Noel continues the story of when some Unix boxes that he helped admin were cracked. This article talks about some of the efforts made to track down the cracker and some surprises. This is the third part of the story . . .

LinuxSecurity.com Team
May 22, 2000

User and Session Management Strategies in E-Commerce Development

This is the second article in a three-part series dealing with using PHP 4 and MySQL to make a comprehensive e-commerce storefront solution. This article covers session management within the store, user privileges, and a few security concerns. . . .

LinuxSecurity.com Team
May 19, 2000

Comparing Reported Security Threats in Various Operating Systems

Ever wanted to know which operating systems and applications have the most reported security vulnerabilities? Are there more known vulnerabilities in Windows NT or Linux? To find out check out the BUGTRAQ Vulnerability Database statistics page. . . .

LinuxSecurity.com Team
May 15, 2000

Sendmail 8.11.0 Beta Enhances Email Security With TLS Integration

"... Transport Layer Security (TLS) is now in open source sendmail. As the official announcement explains, "Ever since the easing of crypto export regulations in the United States, we have been working on releasing the STARTTLS and SMTP Authentication Security . . .

LinuxSecurity.com Team
May 10, 2000

Security Advisory: Zope Redirect Risk Identified by Digital Creations

LWN has written up an article describing the "redirect" security difficulty found by the folks at Digital Creations while tracking down a security problem with the Zope application server. "Given the way the web and authentication-based sites work, a suitably . . .

LinuxSecurity.com Team
May 09, 2000

Community Poll

More Polls

Server Security - Page 50

Misuse of Cron Jobs for Long-Term Access in Linux Environments

Securing Remote Access to Linux Servers: Best Practices for 2026

Linux AI Tools Require Enhanced Observability for Security