Server Security - Page 39 - Results from #760

Discover Server Security News

Insecure Web Proxy Servers

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

In this column, we look at insecure Web Proxy Servers; buffer overflows in ncurses, Squid, hanterm, and ripMime; and problems in gnujsp, the NetBSD kernel, jmcce, the IRIX Unified Name Service Daemon, and Chuid. Some insecurely-configured Web proxy servers can be . . .

LinuxSecurity.com Team
Feb 27, 2002

Using Apache to stop bad robots

For just about as long as the commercial Internet has existed, SPAM email has been the bane of users worldwide. The harder and harder we try to fight the spammers and keep our email addresses out of their hands, the smarter . . .

LinuxSecurity.com Team
Feb 27, 2002

Q&A with ICANN's security chairman, Stephen Crocker

The software that runs the Internet's addressing system that helps make Web commerce and communication possible led the CERT Coordination Center's list of systems that faced serious intruder problems last year. The Internet Software Consortium's Berkeley Internet Name Domain (BIND) server . . .

LinuxSecurity.com Team
Feb 25, 2002

Flaws in LIDS, CUPS, and Sawmill

Welcome to Security Alerts, an overview of recent Unix and open source security advisories. In this column, we look at a security vulnerability in LIDS; buffer overflows in CUPS, jgroff, Sun Solstice Enterprise Master Agent, and Ettercap; and problems in Sawmill, Faq-O-Matic, pforum, GNAT, Taylor UUCP, and IRIX O2 Video.. . .

LinuxSecurity.com Team
Feb 20, 2002

Application security 'in a grim state'

Application security is "in a grim state", according to new research. Almost half of application security vulnerabilities are readily exploitable through entirely preventable defects. The typical ebusiness application is at serious risk of compromise because of security flaws introduced early in . . .

LinuxSecurity.com Team
Feb 19, 2002

Transactional Security in BIND 9

Like most Internet protocols, the Domain Name System (DNS) began its life without many built-in security mechanisms. DNS is, after all, a global, public naming service, so you don't normally care who queries your name server for data in the zones that you are responsible for maintaining.. . .

LinuxSecurity.com Team
Feb 19, 2002

New Twist On Web-Forms Hack Scarfs Browser Cookies

An independent network security researcher has uncovered a new way to steal the secret browser "cookies" of Web surfers with the help of Internet servers that were never intended to communicate with browser software. The exploit, described by a researcher who uses the handle "Obscure" and posted on the Eye On Security Web (EOS) site, relies on common Internet server software other than Web servers that can "echo" hijacked submissions from HTML forms.. . .

LinuxSecurity.com Team
Feb 07, 2002

Hardened OSes Boost E-commerce Security

Enter the resurrection of the TOS (trusted operating system), a relic from the early '80s developed for military and government security. Considered by many to be too expensive and complicated to implement and maintain, TOSes failed to catch on when introduced . . .

LinuxSecurity.com Team
Feb 06, 2002

Vulnerabilities in Astaro Security Linux

Several serious theoretical and practical security vulnerabilities, alleged GPL license violations, and more were found in Astaro "secure" Linux. Joerg Luebbert writes, "Some of the vulnerabilities might be local and some might argue about that Astaro Security Linux is a Firewall and no server... but as it uses SSHD it could always be that the "loginuser" account might have been compromised and shell access granted.". . .

LinuxSecurity.com Team
Feb 06, 2002

Using Active FTP Clients Through an OpenBSD 3.0 Firewall

With release 3.0 the OpenBSD project replaced Darren Reed's ipf software with the more license friendly pf filtering software. While pf and ipf are very similar in overall design, there are many subtle differences bewteen the two. This paper will focus . . .

LinuxSecurity.com Team
Feb 05, 2002

Windows more secure than Linux?

Update: vnunet updates report with "Controversy brews in Linux camp". Windows suffered fewer security vulnerabilities than Linux last year, according to figures released by vulnerability tracker SecurityFocus. Although the statistics so far only go up to August 2001, aggregated distributions of . . .

LinuxSecurity.com Team
Feb 04, 2002

Qmail-Scanner Mail Content Scanner

Jason Haar dropped us a note to inform us of the qmail content scanner. "Qmail-Scanner is an addon to Qmail that enables a Qmail Email server to scan all gatewayed Email for certain characteristics (i.e. a content scanner).. . .

LinuxSecurity.com Team
Jan 30, 2002

LinuxWorld: Out of the box, Linux is 'dreadfully insecure,' says Beale

Jay Beale, the lead developer of Bastille Linux and an independent security consultant, says it's not the Unix-based systems with interesting stuff on them that get hacked, it's the vulnerable ones. And if you're not prepared to tighten up what you . . .

LinuxSecurity.com Team
Jan 29, 2002

Problems with sudo, at, and efax

In this column, we look at buffer overflows in clanlib, efax, LibGTop, and icecast-server; and problems in sudo, at, cdrdao, Conectiva Linux's MySQL, Open UNIX and UnixWare 7 xterms, Red Hat's Secure Web Server, Mandrake's BIND, xchat, klprfax_filter, and an HP-UX denial-of-service attack.. . .

LinuxSecurity.com Team
Jan 23, 2002

Configuring OpenSSH for the Solaris Operating Environment

Networks have never been secure. As the demand on open networks for remote access has grown, the risks of compromised systems and accounts has kept pace. Tools for securing networks, such as OpenSSH, were developed to counter the threats of password . . .

LinuxSecurity.com Team
Jan 23, 2002

Increased activity on port 12345

Increased activity on TCP port 12345 -- best known as both the NetBus Trojan's default port and the port used for a Trend Micro antivirus product -- has the security community arguing as to who is responsible. Is it Trend Micro . . .

LinuxSecurity.com Team
Jan 22, 2002

ProFTPD's DoS Problem and Slash's Weak Link

In this column, we look at several problems with ProFTPD; a Trojan Horse application disguised as an exploit; buffer overflows in the glibc library, dtspcd, wmcube-gdk, and Mandrake Linux's Kerberos telnet; and problems in Slash, IBM Websphere, popauth, Aftpd, TWIG, PGPMail.pl, . . .

LinuxSecurity.com Team
Jan 18, 2002

Kernel Korner: Inside the Linux Packet Filter

In Part I of this two-part series on the Linux Packet Filter, Gianluca describes a packet's journey through the kernel. Network geeks among you may remember my article, ``Linux Socket Filter: Sniffing Bytes over the Network'', in the June . . .

LinuxSecurity.com Team
Jan 15, 2002

Sudo version 1.6.4 now available

There are some thing I had promised for the next release that are not in 1.6.4 due to the large changes in the parser that these changes require to work properly. Nonetheless this release does fix the majority of problems . . .

LinuxSecurity.com Team
Jan 14, 2002

Filtering Spam with Procmail

In the last article, we installed the procmail utility and generated a few basic recipes. This week, let's start by looking at procmail's built-in logging mechanism. We'll then take a look at some other available resources that build on procmail's capabilities.. . .

LinuxSecurity.com Team
Jan 14, 2002

Server Security - Page 39

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide