Server Security - Page 36 - Results from #700

Discover Server Security News

Former Motorola Engineers Develop Secure, Reliable Web Server

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

If computers that cannot be hacked revolutionize the Internet next year, you can thank two guys named Eric who were just looking to get some sleep. They come from a cyberspace neighborhood on the wrong side of the tracks--where the dull . . .

LinuxSecurity.com Team
Aug 26, 2002

Introduction to Autorooters: Crackers Working Smarter, Not Harder

Efficiency and automation: one can argue that they are two of the most valuable by-products of any technology. There is little doubt that the electronic tools of today allow us to get more done in less time. We use software to . . .

LinuxSecurity.com Team
Aug 22, 2002

Wrapping Up DJBDNS

Welcome to the home stretch, my last [2] ITworld article on installing DJBDNS. I'll cover two things here. First, I'll show you how to 'import' your existing BIND zones into tinydns data format so you don't need to convert those files by hand. Lastly, I'll show you how to start up the axfrdns server, which will allow DNS secondaries running BIND to mirror your DNS zones.. . .

LinuxSecurity.com Team
Aug 21, 2002

xinetd: Update: File descriptor leak vulnerability

xinetd version 2.3.7 was released that addresses a mior file descriptor leak present in 2.3.4 - 2.3.6. Steve Grubb, co-maintainer of xinetd, sent in a note stating, "At the most, if everything is in just the right configuration...which is probably rare, all they can do is terminate xinetd." . . .

LinuxSecurity.com Team
Aug 14, 2002

XML Web services need a firewall

Today, application integration is the single biggest challenge facing IT organizations. With business imperatives driving an increasing need for cross-organization integration, this challenge is getting ever more complex. XML Web services is a term referring to a set of related . . .

LinuxSecurity.com Team
Jul 30, 2002

Secure site seals may be misleading: Netcraft

Secure site seals handed out to sites by certificate authorities and lock icons shown by browsers can often mislead consumers into believing that a site is more secure than it actually is, according to the latest Netcraft Web Server Survey.. . .

LinuxSecurity.com Team
Jul 29, 2002

XML Security: A Who's Who

When a standard is deployed as openly as XML, businesses are bound to have security concerns. The need to control content's distribution and ensure its integrity keeps many companies from deploying XML without an extranet. Proposed standards will address security . . .

LinuxSecurity.com Team
Jul 10, 2002

Integrating Flexible Support for Security Policies into the Linux Operating System

This article discusses implementing Mandatory Access Control in the SE Linux system. "The protection mechanisms of current mainstream operating systems are inadequate to support confidentiality and integrity requirements for end systems. Mandatory access control (MAC) is needed to address such requirements, . . .

LinuxSecurity.com Team
Jul 01, 2002

Linux: Feelin' Secure

TechWeb summarizes the recent articles they have published on security Linux distributions including EnGarde, the Editor's Choice, HP Secure Linux and Immunix. " IT pros navigating a minefield of insecure software and systems are finding safe ground in Linux. That's . . .

LinuxSecurity.com Team
Jun 28, 2002

Squid Vulnerability: Insecure forwarding of proxy_auth

Vendors have not issued updates yet for a vulnerability just reported by the Squid Project. "Under some conditions Squid may forward the proxy authentication credentails. This can happen if you normally require your users to log in to use the proxy, but allow some sites to be reached without needing to log in.". . .

LinuxSecurity.com Team
Jun 27, 2002

Apache Web Server Security Alert (Update)

Update: For millions of websites that were vulnerable care of ISS, Apache is not too happy. ISS (Internet Security Systems) released an insufficient patch along with their advisory to the Apache Web . . .

LinuxSecurity.com Team
Jun 21, 2002

Securing Small Networks with OpenBSD Part 5

Watching pf logs can be exciting for the first few hours, but it soon becomes a boring activity best left to the machines. But first we need to know how OpenBSD manages pf logs. The pf packet logging mechanism uses the standard system logger daemon syslogd to store packet information in /var/log/pflog.. . .

LinuxSecurity.com Team
Jun 20, 2002

VPN Implementation in Cluster Computing

VPNs often are heralded as one of the most cutting-edge, cost-saving solutions to various applications, and they are widely deployed in the areas of security, infrastructure expansion and inter-networking. A VPN adds more dimension to networking and infrastructure because it enables . . .

LinuxSecurity.com Team
Jun 19, 2002

Apache Security Release Available

"This version of Apache is principally a security and bug fix release. A summary of the bug fixes is given at the end of this document. Of particular note is that 1.3.26 addresses and fixes the issues noted in CAN-2002-0392 (mitre.org) [CERT VU#944335] regarding a vulnerability in the handling of chunked transfer encoding.. . .

LinuxSecurity.com Team
Jun 18, 2002

Update: Apache users urged to upgrade to fix security flaws

The creators of Apache Web Server software said today that all Apache users are potentially affected by security vulnerabilities that were announced yesterday, even as a controversy continues about how the flaws were initially made public.. . .

LinuxSecurity.com Team
Jun 18, 2002

Two security alerts point to Apache Web Server flaws

Two security alerts about new vulnerabilities affecting the popular open-source Apache Web Server have been posted by two groups today. The nonprofit Apache HTTP Server Project group has issued a bulletin about a vulnerability that can allow distributed denial-of-service attacks in . . .

LinuxSecurity.com Team
Jun 17, 2002

Apache httpd: vulnerability with chunked encoding

While testing for Oracle vulnerabilities, Mark Litchfield discovered a denial of service attack for Apache on Windows. Investigation by the Apache Software Foundation showed that this issue has a wider scope, which on some platforms results in a denial of service vulnerability, while on some other platforms presents a potential a remote exploit vulnerability.. . .

LinuxSecurity.com Team
Jun 17, 2002

NSA gets Linux secure

Security is one of the highest profile issues in IT and there has been constant baiting between the Microsoft and Linux camps over who has the more secure operating system. At the start of the year we saw Bill Gates wake up to the fact that security is a good thing and now there is news that the US National Security Agency has been working on a security module that plugs straight into a Linux distribution.. . .

LinuxSecurity.com Team
Jun 17, 2002

An Idea To Can the Spam

The problem is that filters do not always prevent mail from bad sources, and the whole "opt-in" farce has resulted in spammers sending whatever messages they want. Yahoo, MSN and many other free (and even paid) e-mail services seem to be repositories for spammers. Even when customers pony up dollars for better accounts, the results are often the same.. . .

LinuxSecurity.com Team
Jun 17, 2002

The New [Debian] Security Build Infrastructure

"So, there's probably a whole bunch of people out there who're interested in the form new security infrastructure will take. So, what's the solution? Converting security.debian.org to be run by katie [and] Modifiying the central wanna-build infrastructure to do "Accepted-Autobuilding". Read more below.. . .

LinuxSecurity.com Team
Jun 13, 2002

Server Security - Page 36

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide