Server Security - Page 35 - Results from #680

Discover Server Security News

Secure your Samba shares

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

RAV AntiVirus for Samba (Linux) is, as the name describes it, an antivirus product 100% dedicated to Linux, protecting file servers from viruses and other malwares, regardless of the systems targeted. Due to integration of a cutting edge technology named "total platform independence", RAV engine detects all malwares, be it for Windows, Linux or other OS. . .

LinuxSecurity.com Team
Nov 21, 2002

Encrypted NFS with OpenSSH and Linux

NFS is a widely deployed, mature, and understood protocol that allows computers to share files over a network. The main problems with NFS are that it relies on the inherently insecure UDP protocol, transactions are not encrypted, hosts and users cannot . . .

LinuxSecurity.com Team
Nov 14, 2002

Notice of serious vulnerabilities in ISC BIND 4 & 8

ISC is aware of several bugs which can result in serious vulnerabilities in BIND as distributed by ISC. Upgrading to BIND version 9.2.1 is strongly recommended. However, patches for BIND 8.3.3, 8.2.6 and 4.9.10 are now publicly available from ISC and new BIND 4 & 8 releases will be published in the next day or two . . . .

LinuxSecurity.com Team
Nov 13, 2002

Make Nessus Your New Security Tool of Choice

No ace sysadmin should be without Nessus, it's the utility of choice for hardcore security scanning. Nessus is based on nmap, the excellent port scanner by Fyodor. Primarily authored by Renaud Deraison, it adds a nice graphical interface and loads of attack. . .

LinuxSecurity.com Team
Nov 12, 2002

Passwords: Poor Excuse for Security

Cut costs. Save money. Maintain the status quo. With that mantra in mind, many network managers figure they've got authentication covered. As long as there's a password policy in place, who needs to spend money on authentication tools. . .

LinuxSecurity.com Team
Oct 25, 2002

Top Linux/UNIX Security Threats

It's depressing for security professionals to see just how many of the vulnerabilities on the new SANS/FBI Top 20 List have CVE numbers in the 1999-xxxx range--meaning that they were identified and fixed years ago on some systems. Newer problems . . .

LinuxSecurity.com Team
Oct 24, 2002

Build a Secure Webmail Service Supporting IMAP and SSL

This article describes how you can set up your Linux computer to be a web-based e-mail system for yourself or a group of friends. It will work best, of course, if you are on a dedicated internet connection, like a cable modem or a DSL line at home. This will provide you with a secure method to check your e-mail from remote locations without having to add insecure connection methods that could be used by an attacker. . . .

LinuxSecurity.com Team
Oct 23, 2002

Why Web Application Security is the New Threat

As the use and exploitation of the Internet matures, so does its need for security. Most seriously engineered Internet sites deploy firewalls and other similar techniques to restrict Internet access to limited ranges of network services. Although the hacking community continues . . .

LinuxSecurity.com Team
Oct 23, 2002

Exposing the Underground: Adventures of an Open Proxy Server

Joe Stewart writes, "This paper discusses the abuse of misconfigured HTTP proxy servers, taking a detailed look at the types of traffic that flow through this underground network. Also discussed is the use of a "honeyproxy", a server designed to look like a misconfigured HTTP proxy. Using such a tool we can spy on the Internet underground without the need for a full-blown honeypot.. . .

LinuxSecurity.com Team
Oct 22, 2002

Linux Security Protection System Released

LinSec team is proud to announce the first stable release of LinSec. LinSec, as the name says, is Linux Security Protection System. The main aim of LinSec is to introduce Mandatory Access Control (MAC) mechanism into Linux (as opposed to existing Discretionary Access Control mechanism).. . .

LinuxSecurity.com Team
Oct 16, 2002

Embedding security into servers

Embedded systems control much of the world's critical infrastructure, which makes them a prime target for attack by everyone from hackers to terrorists. Embedded systems, however, have at their disposal an impressive set of defenses, mechanisms and procedures that are in . . .

LinuxSecurity.com Team
Oct 16, 2002

Chroot Jails Made Easy with the Jail Chroot Project

So what is a "chroot jail"? Essentially it is a security method for creating a safe user enviroment on systems that allow remote access accounts. The "jail" locks users into a virtual directory structure and grants access only to applications created for the jailed users by the administrator.. . .

LinuxSecurity.com Team
Oct 14, 2002

Security Expert Gives Operating Systems Poor Security Grade

Is open source software more secure? To most Linux enthusiasts, the answer is obvious: open source means more people can look for bugs and a faster dissemination of bug fixes. Obviously, yes. But noted security expert Gene Spafford says that this may not necessarily be true. According to the Purdue professor of computer science and co-author of Practical Unix & Internet Security, good security begins with good design and neither Windows nor Linux have much to brag about in that category.. . .

LinuxSecurity.com Team
Oct 14, 2002

Apache 1.3.27 Released: Fixes Multiple Security Vulnerabilities

This version fixes multiple security vulnerabilities including a SysV a SysV shared memory-based scoreboards attack, a XSS vulnerability in the default 404 page handling hosted on a domain that allows wildcard DNS lookups, and some possible overflows in ab.c which could be exploited by a malicious server.. . .

LinuxSecurity.com Team
Oct 04, 2002

Honeymoon over for Linux users

As open source software becomes increasingly popular it is being targeted by virus writers and proving to be at least as vulnerable as Microsoft. The virus-monitoring laboratory of Network Associates' Antivirus Emergency Response Team (Avert) has logged over 170 viruses and Trojans for Linux, as well as an additional 30 Unix shell scripts. . . .

LinuxSecurity.com Team
Sep 30, 2002

Stamp out spam with SpamAssassin

This article takes a look at the evolution of the spam cycle (for as Sun Tzu and every general who ever came after him said, "Know thine enemy and victory will be forthcoming"). It also takes a look at SpamAssassin, the latest in a long and venerable line of weapons in the fight against spam, as well as a look ahead. . . .

LinuxSecurity.com Team
Sep 21, 2002

Transatlantic worm targets Linux

Apache web servers under attack from 'Slapper' A new worm is spreading from the US to infect Linux web servers. The Linux Slapper worm attacks Apache web servers using a hole in the Open secure sockets layer encryption module and . . .

LinuxSecurity.com Team
Sep 17, 2002

Linux Slapper Worm Still Spreading

The Slapper worm continued to spread quickly over the weekend, with some security experts putting the number of compromised servers as high as 6,000. As first reported by eWeek on Friday, the worm attacks Linux machines running the Apache Web . . .

LinuxSecurity.com Team
Sep 17, 2002

Web Server Security: Securing Dynamic Web Content

Once upon a time, the World Wide Web was a relatively static place. The Web server's sole function was to simply deliver a requested Web page, written in HTML, to a client browser. Over time, developers started looking for ways to . . .

LinuxSecurity.com Team
Sep 12, 2002

IT managers cite security and competition when choosing a Linux system

A Cannes-based private investigator, Alain Stevens, recently switched computer operating systems from Windows to Linux. "It's a security issue," Stevens said. "Viruses which target Windows could send confidential documents from my machines to random people - and that could send me to prison.". . .

LinuxSecurity.com Team
Sep 09, 2002

Server Security - Page 35

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide