APLawrence.com -  Resources for Unix and Linux Systems, Bloggers and the self-employed

Security Reminders

Fri Nov 28 19:46:04 GMT 2003 Security Reminders

Links: newsvac.newsforge.com/article.pl?sid=03/11/28/1545237 (link dead, sorry)Debian attacker may have used new exploit
macslash.org/article.pl?sid=03/11/26/1240248 (link dead, sorry) New Security Hole In Mac OS X

The Debian Linux exploit was apparently a case of escalation: getting into the system with an ordinary user account, and then somehow becoming root.

The Mac exploit requires a "evil" DHCP server on YOUR network; rather unlikely ordinarily, but if your DHCP server was compromised by some weakness on it, this could be a concern.

So, let's remember the basics: weak passwords are dangerous. People who don't need to login remotely shouldn't be able to. Unnecessary services shouldn't be left running, even if they are supposedly "safe" behind a firewall. There are plenty of potential security problems that you can't absolutely control, but if you aren't doing at least the basics, you are just asking for trouble.

Reminder to SME clients: by default, NO remote user is allowed remote access or VPN use, and all other access (FTP, Telnet etc.) is completely off.. You can turn off ssh and vpn access entirely through your admin control panel.



Got something to add? Send me email.




Increase ad revenue 50-250% with Ezoic


More Articles by

Find me on Google+

© Tony Lawrence



Kerio Connect Mailserver

Kerio Samepage

Kerio Control Firewall

Have you tried Searching this site?

Unix/Linux/Mac OS X support by phone, email or on-site: Support Rates

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us





An editor is a person who knows precisely what he wants, but isn't quite sure. (Walter Davenport)





This post tagged: