Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Stay Ahead With Linux Security News

Filter%20icon Refine news
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security news

We found -1 articles for you...
77

Comparing the Differences Between Vsftpd and ProFTPd FTP Servers

FTP is a standard protocol that is used to transfer files widely, and FTP servers like Vsftpd and ProFTPd provide a way to use that protocol and access plus transfer files stored on a remote server. Here we quickly learn the difference between Vsftpd and ProFTPd. . vsftpd (Very Secure FTP Daemon) is a GPL-licensed FTP server software developed to provide a secure but fast way to transfer files. It is popular among Linux users because of its simplicity and efficient use of system resources. That’s the reason why most Linux distros such as Redhat, Fedora, Ubuntu, Debian, and more offer this FTP server package to install directly from the base repository of the system. Learn – How to install VSFTPD to Setup FTP Server on Ubuntu 22.04. ProFTPd (Pro FTP daemon) is also an open-source FTP server just like Vsftpd but comes highly customizable and extensible. It offers a wide range of advanced features like virtual hosts, SSL/TLS encryption, and LDAP authentication. It is designed to be a highly feature-rich FTP server. . When comparing vsftpd and ProFTPd, both excel in secure file transfers, but vsftpd is simpler and more performance-oriented, while ProFTPd offers flexibility and advanced features. Vsftpd, ProFTPd, FTP Server Comparison, File Transfer Protocols. . LinuxSecurity.com Team

Calendar%202 Mar 29, 2023 User Avatar LinuxSecurity.com Team Server Security
77

Securing Linux: Protection Strategies For Apache, ProFTPd, And Samba

While the vast majority of Linux users are hard-core techies, some may be using Linux because they want to try something new, are interested in the technology, or simply cannot afford or do not want to use Microsoft Windows. . After becoming acquainted with the new interface of Linux, whether KDE, Gnome, or another window manager, users may begin to explore their system. Many machines come with default installations of Apache and Samba, and a few others even include a FTP daemon. The link for this article located at Net-Security.org is no longer available. . Improving security and optimizing user interaction by fortifying Linux with Nginx, vsftpd, and Samba. Explore further in our comprehensive manual.. Apache Configuration, ProFTPd Setup, Samba Hardening. . LinuxSecurity.com Team

Calendar%202 Jun 02, 2005 User Avatar LinuxSecurity.com Team Server Security
77

Mandrake Linux ProFTPD Critical DoS Buffer Overflow Threat 111115

In this column, we look at several problems with ProFTPD; a Trojan Horse application disguised as an exploit; buffer overflows in the glibc library, dtspcd, wmcube-gdk, and Mandrake Linux's Kerberos telnet; and problems in Slash, IBM Websphere, popauth, Aftpd, TWIG, PGPMail.pl, . . . . In this column, we look at several problems with ProFTPD; a Trojan Horse application disguised as an exploit; buffer overflows in the glibc library, dtspcd, wmcube-gdk, and Mandrake Linux's Kerberos telnet; and problems in Slash, IBM Websphere, popauth, Aftpd, TWIG, PGPMail.pl, and the Cisco SN 5420 Storage Router. The ProFTPD FTP daemon is vulnerable to a denial-of-service attack and a problem in resolving some host names properly. The denial-of-service attack can be used by a remote attacker to cause ProFTPD to consume all of the CPU and memory on the server. The resolution problem is caused by ProFTPD not properly forward-resolving reverse-resolved host names, and could be used by an attacker to get around ProFTPD access control lists or to log incorrect host names. Users should consider upgrading ProFTPD to version 1.2.5rc1 or newer. . Uncover vulnerabilities in ProFTPD, encompassing Denial of Service (DoS) threats, harmful software applications, and associated buffer overflow risks. Remain vigilant!. ProFTPD Security, Denial of Service, Buffer Overflow, Risk Management. . LinuxSecurity.com Team

Calendar%202 Jan 18, 2002 User Avatar LinuxSecurity.com Team Server Security
74

Buffer Overflows and Network Issues in Multi-Homed Servers

In this column, we look at buffer overflows in ircd, ePerl, MIT Kerberos 4 and 5, ascdc, and slrn; temporary file problems in MIT Kerberos 4 and 5, the GNU C Library, and the Athena widget libraries; other problems with proftpd . . . . In this column, we look at buffer overflows in ircd, ePerl, MIT Kerberos 4 and 5, ascdc, and slrn; temporary file problems in MIT Kerberos 4 and 5, the GNU C Library, and the Athena widget libraries; other problems with proftpd under Debian, Midnight Commander, Cisco Aironet 340 Bridges, and man2html; and a discussion of loopback devices and multi-homed routing. Some operating systems when configured with two or more network interfaces (multi-homed) will deliver packets received from a network interface to the loopback interface. This is a not a bug in the TCP/IP stack of these operating systems. It is an unexpected result of following the applicable Internet standards. Systems that this affects include FreeBSD, NetBSD, and OpenBSD. It is not clear which Linux configurations, if any, are vulnerable. . Buffer overflows pose serious vulnerabilities in computing, particularly affecting applications like ircd and libraries such as glibc, leading to severe system issues.. Buffer Overflows, Multi-Homed Servers, Network Threats, Security Issues. . Anthony Pell

Calendar%202 Mar 15, 2001 User Avatar Anthony Pell Network Security
News Add Esm H340

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200