Server Security - Page 34 - Results from #660

Discover Server Security News

Web Server Compromise?

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

It depends upon the motive of the attacker. If you were targeted specifically, its possible the attacker will first attempt to hide their presence on the system, and then remain there quietly observing, altering files or using it as a . . .

LinuxSecurity.com Team
Apr 21, 2003

Inside the World of Secure Operating Systems

On a normal system, if an attacker gains root or administrator access, he or she can run rampant. Not so on a trusted system -- at least so long as it is properly configured. Another hardened OS is EnGarde Linux, which is sold by Guardian Digital. EnGarde uses the same applications one might find in another Linux distribution, but the approach to building the final product is a bit different. Dave Wreski, CEO of Guardian Digital, told NewsFactor that the average Linux distribution "tries to be all things to all people," which makes it difficult to secure the system.. . .

LinuxSecurity.com Team
Apr 08, 2003

Buffer Overflow in Samba allows remote root

An anonymous user can gain remote root access due to a buffer overflow caused by a StrnCpy() into a char array (fname) using a non-constant length (namelen). An exploit named trans2root.pl has been posted on the Digital Defense, Inc. website. A quick udp based based scanner named nmbping.pl has also been posted to assist you in identifying Samba servers on your network.. . .

LinuxSecurity.com Team
Apr 07, 2003

Security Administration with Debian GNU/Linux

Debian has a package manager (DPKG) that resolves dependency problems automatically. It help us to automatically keep up to date programs looking for new versions on the internet, resolving and completing the files and libraries dependencies which a package requires, making system administration easy and keeping us up to date with the new security changes.. . .

LinuxSecurity.com Team
Apr 03, 2003

Another Sendmail Vulnerability

Sendmail, Inc., and the Sendmail Consortium announce the availability of sendmail 8.12.9. It contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either upgrade to sendmail 8.12.9 or apply a patch for your sendmail version that is part of this announcement.. . .

LinuxSecurity.com Team
Mar 31, 2003

SpamAssassin 2.52 Released

Multiple bugfixes relating to Bayes support and other fixes new in this version. SpamAssassin is a mail filter to identify spam. Using its rule base, it uses a wide range of heuristic tests on mail headers and body text to . . .

LinuxSecurity.com Team
Mar 26, 2003

Linux Firms Look To Plug Samba Hole

The open-source community is pushing customers to patch their systems to close a hole in a software component that allows Windows programs to store and retrieve files on Linux and Unix servers. . .

LinuxSecurity.com Team
Mar 19, 2003

Samba 2.2.8 Available, Fixes Serious Security Vulnerability

The SuSE security audit team, in particular Sebastian Krahmer , has found a flaw in the Samba main smbd code which could allow an external attacker to remotely and anonymously gain Super User (root) privileges on a server running a Samba server.. . .

LinuxSecurity.com Team
Mar 15, 2003

Is a Sendmail worm likely?

A serious buffer overflow vulnerability announced last week in Sendmail is ripe to be exploited by targeted attacks, but it is also possible for a worm writer to write malicious code that exploits the security hole. No one can say whether a worm writer will create malware that targets the Sendmail flaw, but it is possible, experts said. The pervasiveness of the flaw and of Sendmail usage are strong reasons to be wary of the potential for such a worm. . . .

LinuxSecurity.com Team
Mar 12, 2003

Buffer Overflow Attacks and Their Countermeasures

Buffer overflow problems always have been associated with security vulnerabilities. In the past, lots of security breaches have occurred due to buffer overflow. This article attempts to explain what buffer overflow is, how it can be exploited and what countermeasures can be taken to avoid it. . . .

LinuxSecurity.com Team
Mar 10, 2003

Bound by Tradition: A Sampling of the Security Posture of the Internet's DNS Servers

DNS servers across the Internet running BIND are not up to date with security patches and software updates. As a result, a significant fraction of the Internet's DNS servers is vulnerable to compromise, subversion, denial of service, and general misuse. Considering that DNS is the lynchpin of the corporate enterprise, the impact of these vulnerabilities is significant and a successful attack could bring down any online business.. . .

LinuxSecurity.com Team
Mar 06, 2003

Google: Net Hacker Tool du Jour

Why bother pounding at a website in search of obscure holes when you can simply waltz in through the front door? Hackers have recently done just that, turning to Google to help simplify the task of honing in on their . . .

LinuxSecurity.com Team
Mar 05, 2003

Critical Sendmail Vulnerability, Updates available

A new critical vulnerability has been discovered in Sendmail. The UNIX and Linux vendors have been working feverishly to get a patch ready and most are available now. Sendmail is too big a target for attackers to ignore, so it makes sense to act immediately to protect your systems. Also, nice outline of how the whole disclosure was performed between countries, distributions, state and country agencies, and the vendor.. . .

LinuxSecurity.com Team
Mar 03, 2003

Is Linux as vulnerable as Windows?

Counting viruses is simplistic, but there is evidence that Windows is becoming more resistent, and Linux is becoming more of a target Turning the heat up another notch on a long-simmering debate, the Aberdeen Group has published a study comparing the security of Linux/Unix systems with that of the Microsoft Windows family of products.. . .

LinuxSecurity.com Team
Feb 26, 2003

PHP Security Advisory: CGI vulnerability in PHP version 4.3.0

The PHP Group has learned of a serious security vulnerability in the CGI SAPI of PHP version 4.3.0.. . .

LinuxSecurity.com Team
Feb 17, 2003

FTP Server Offers Key to the Store

This week I was sidetracked from my projects yet again by the need to investigate two security incidents. Both involved deleted files on servers that apparently had been compromised. The first incident was more of a server configuration issue than a . . .

LinuxSecurity.com Team
Feb 13, 2003

Secure your DNS - replace BIND

BIND has become the most popular DNS server on the Internet. It is also a favorite hacker target. For organisations that require a more secure DNS infrastructure, the djbdns package may be the answer. . .

LinuxSecurity.com Team
Feb 05, 2003

Game Server Flaw Poses Attack Threat

Ryan Bril submits Multiplayer game servers that let players attack each other in virtual worlds could be the latest tool for online scofflaws to digitally attack other computers on the Internet, a security firm said Thursday. . .

LinuxSecurity.com Team
Jan 20, 2003

How to Build, Install, Secure & Optimize Xinetd

Xinetd is a secure, powerful and efficient replacement for the old Internet services daemons named inetd and tcp_wrappers. Xinetd can control denial-of-access attacks by providing access control mechanisms for all services based on the address of the remote client that wants to connect to the server as well as the ability to make services available based on time of access, extensive logging, and the ability to bind services to specific interfaces.. . .

LinuxSecurity.com Team
Dec 02, 2002

tcpserver: Secure, Flexible Daemon Management

If you're still running inetd, it's time to move on. Either xinetd or tcpserver offer superior security and control. We're going to look at tcpserver. Note that there is one limitation: it manages only tcp. If you're using UDP or rpc services, tcpserver alone will not do the job. In that case, xinetd is the way to go.. . .

LinuxSecurity.com Team
Nov 25, 2002

Server Security - Page 34

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide