Server Security - Page 41 - Results from #800

Discover Server Security News

On the Security of PHP

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

This article will provide you an overview of various security issues with PHP and offer advice on secure PHP programming practices. PHP has achieved a stable and solid presence on the Web in the last several years, and its popularity as . . .

LinuxSecurity.com Team
Nov 07, 2001

Fingerprinting Port 80 Attacks

bob writes, "CGIsecurity.com recently wrote a paper on fingerprinting port80 attacks." These holes can allow an attacker to gain either administrative access to the website, or even the web server itself. This paper looks at some of the signatures . . .

LinuxSecurity.com Team
Nov 06, 2001

ApacheWeek: 2.0 Security Summary

Two denial of service attacks were found in the Apache 2.0 code this week - both concerned with memory usage when sending large requests. The first was that the server did not respect the maximum header field length, and would consume memory indefinitely while reading a header line.. . .

LinuxSecurity.com Team
Nov 02, 2001

Dave Dittrich Responds to WinXP Security Claim

Dave Dittrich, best known for his Honeynet and DDoS expertise, responds to claims made by Steve Gibson claiming that "raw sockets are the devil" in the latest OS by Microsoft. Dave writes, "Steve Gibson is *still* pushing "raw sockets are the devil?" Anyone (especially journalists) who are interested in this topic had best look into the details, not just take what Steve tells them.". . .

LinuxSecurity.com Team
Oct 25, 2001

Good security administration is crucial

Firms should revamp their security admin rather than just avoiding Microsoft products, warns expert. Firms are being advised to tighten up on security administration rather than switch from Microsoft software to open source operating systems, as fears . . .

LinuxSecurity.com Team
Oct 20, 2001

A Sysadmin's Security Basics

System administrators are no longer alone in their concern for security. The increase in high-profile virus attacks, and a general sense of heightened security, means that executives are likely to have security on their mind. It may be easier than ever . . .

LinuxSecurity.com Team
Oct 19, 2001

The Security Side of Windows XP: Hope, Risk Run High

According to security experts, Windows XP may give users more control and customization, but the new OS may also bring more risk. The latest operating system from Microsoft (Nasdaq: MSFT) is winning praise for its stability and functionality, but . . .

LinuxSecurity.com Team
Oct 16, 2001

Web server attacks doubled over the last year

Web server attacks have doubled over the course of the last year, despite increased spending on security. That's the main conclusion of a survey of more than 2,500 organisations, sponsored by security firms TruSecure and Predictive Systems. The survey found that . . .

LinuxSecurity.com Team
Oct 12, 2001

BSD security fundamentals

Subterrian.net has a copy of the presentation delivered by Sean Lewis at ToorCon 2001, held last weekend in San Diego, Calif. Lewis discusses BSD essential BSD security issues, working well as a primer for new and experienced users alike. Read all . . .

LinuxSecurity.com Team
Oct 05, 2001

RAZOR Advisory: Multiple Local Sendmail Vulnerabilities

The Sendmail mail delivery subsystem is vulnerable to multiple local attacks that lead to information loss, information leaks and mail system compromise. The mail system privileges compromise affects Sendmail 8.12.0. Other problems affect all versions up to 8.12.0.. . .

LinuxSecurity.com Team
Oct 01, 2001

Improving the security of open UNIX platforms

This article takes a look at a little shell application that uses an innovative approach to increasing open UNIX security. A step-by-step analysis of the code is provided. The author's areas of expertise are in Web programming and cutting-edge network security development.. . .

LinuxSecurity.com Team
Sep 27, 2001

vsFTPd Includes Bandwidth Control!

vsFTPd, the "very secure" FTP daemon, now includes the ability to control bandwidth by preventing the link from being saturated. "vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure. Obviously this is not a guarantee, but a reflection that I have written the entire codebase with security in mind, and carefully designed the program to be resilient to attack.". . .

LinuxSecurity.com Team
Sep 23, 2001

Bug Watch - Focus on operating systems

With yet another Linux-based vulnerability hitting last week, Mark Read, network security analyst at MIS Corporate Defence Solutions, delves into an age-old debate that fuels many a discussion. Yes, it's the same old story of Microsoft versus Linux in the race for optimum IT security. What everyone wants to know is, who will cross the finishing line first?. . .

LinuxSecurity.com Team
Sep 22, 2001

Protect Your Network from the Nimda worm

The Nimda worm has spread wildly, infecting many Microsoft Windows 9x, ME, NT 4.0, and 2000 machines, and its network scans have brought some networks to their knees. It was first reported on September 18th in the morning almost one week . . .

LinuxSecurity.com Team
Sep 21, 2001

The Safe Way to Remote Console

Building your own console server is easy. All you need is an old PC and some additional serial cards (most PCs come with only two ports). Multiport serial boards, such as those from Digi International, that install under Linux are available. . . .

LinuxSecurity.com Team
Sep 21, 2001

A 'Tarpit' That Traps Worms

"LaBrea" is a free, open-source tool that deters worms and other hack attacks by transforming unused network resources into decoy-computers that appear and act just like normal machines on a network. But when malicious hackers or mindless worms such as Nimda . . .

LinuxSecurity.com Team
Sep 19, 2001

Is Linux secure enough?

Although proponents argue that Linux is at least as secure-and perhaps more secure-than Unix, Microsoft Corp.'s Windows NT or Novell Corp.'s NetWare, there is still concern at many federal agencies about the operating system's safety.. . .

LinuxSecurity.com Team
Sep 19, 2001

FBI investigating new Internet worm

If Attorney General Ashcroft hadn't talked about this Windows worm on national TV, and received at least ten in my mailbox already, this would probably otherwise belong on an NT security web site, but certainly many of use have heterogeneous networks. Nimbda is Admin backwards... "The worm, known as "W32.Nimda," had affected. . .

LinuxSecurity.com Team
Sep 18, 2001

A Perl Package for Monitoring Traffic

The rtr-graph package described in this article is a set of Perl scripts for polling routers (or other SNMP-enabled devices) for information about traffic in and out of specified interfaces. You can set up "rtr-traff" as a cron job to poll . . .

LinuxSecurity.com Team
Sep 17, 2001

Linux Trojan spotted in the wild

"Eric Chien, chief researcher at Symantec's antivirus research centre, does not expect the virus to spread, principally because it lacks the self-replication characteristics that made Code Red and the Lion worm (which affected Linux servers) such nuisances. "I don't think . . .

LinuxSecurity.com Team
Sep 07, 2001

Server Security - Page 41

Securing Your Linux Server: Understanding and Mitigating Modern Threats

Essential Server Security Security Strategies for Administrators

Ensuring Linux Server Security: A Comprehensive Guide