Security is not a product, but a process.

learn more… | top users | synonyms (2)

0
votes
4answers
871 views

Share permissions when accessed locally via UNC

I have a w2k3 server (terminal server) and a domain user. If the user accesses "\\TS\Folder" from another computer, that user can read\write without any problem. If I login to "TS" as the user, they ...
0
votes
1answer
751 views

Wireless guest access with HP ProCurve 420

We have a HP ProCurve 420 wireless access point hooked up to our LAN, which then connects to the internet though a gateway router. Is it possible to set up a guest SSID, which can access the internet ...
0
votes
1answer
660 views

Can't reset user account password in AD due to Policy's restriction

I am deep *** right now and I need your precious help! Yesterday, I change a user account password in AD (Srv2003). The password was 4 letters, no caps, no numbers. It was set to never expires and ...
0
votes
3answers
3k views

Security Tab missing on internet explorer

I have a windows 2003 SBS domain, which I administrate to the best of my limited abilities. I need to install an active X-control for which I must change settings in internet explorer. It surfaced ...
0
votes
2answers
500 views

ssh failed logins /var/log/btmp

On a VPS where I host some blogs /var/log/btmp file is fairly old - but is at 6.2 gigs. I assume this means a lot of failed login attempts? Is this common over the course of a year ? Bots trying ...
0
votes
2answers
332 views

Can dom0 access disks on domU?

We are looking at deploying our application as a Xen image, to a hosting company that we aren't 100% sure about yet. Can they access random data on our virtual hard drive(s)? This page says no: ...
0
votes
3answers
2k views

Problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista

I'm having some problems installing Symantec AntiVirus Corporate Edition 10.2 for Windows Vista. My client requires this exact version. The system on which I'm installing the software is recently ...
0
votes
1answer
532 views

Windows Vista, Win7 ASLR in Kernel land

Is ASLR also implemented for kernel land address space addresses? if yes, since which version of microsoft windows exactly? Thanks for your time.
0
votes
6answers
211 views

Suggestions to improve e-mail security

I work for a lawyer company which has a lot of extremely sensitive data. I would like to step up a notch on security. Especially when it comes to e-mail. So I'd like a lot of recommendations, ...
0
votes
6answers
463 views

Sidewinder Firewall Replacement/Alternative

We own a Sidewinder G2 110D (out-of-stock) and love it. The product was reasonably priced, support was great, and the device was rock-solid. Since McAffee bought out SecureComputing, they have ...
0
votes
4answers
2k views

Alternative to IBM WebSphere DataPower XML Security Gateway XS40

Is there any alternative to this IBM solution for a SOAP security gateway? Maybe open source software or hardware from other vendors?
0
votes
5answers
392 views

encryption support for database [closed]

I am looking for a way to secure my database! I currenctly have a sql server 2000 as my RDBMS, but we are happy to use/change to whatever product that supports proper security. By security I mean both ...
0
votes
2answers
2k views

Create a user with a specific SID?

I have a web server set up with a user 'apache' that has specific rights. I have copied the files over to another server using WinRAR to maintain the NTFS security streams. Now, on the new server I ...
0
votes
2answers
7k views

Why does my site use the IUSR account when configured for pass-through authentication?

I have an IIS7 website that is set to run in its own application pool. The application pool is configured as: Managed Pipeline Mode: Integrated Identity: I_siteuser (account is member of IIS_IUSRS) ...
0
votes
2answers
146 views

MySQL Development machine permissions

I'm administrating two servers who follow the model of development and production machines. The production machine is stripped bare-bone software which runs under restrictive set of rules and limited ...
0
votes
4answers
251 views

Windows 2008 unable to execute c'# powershell app. Retuning access exception

Does anybody know why I can't access the folder where my powershell scripts are in windows 2008 Ent. When I try to create a script with textpad it craps out. When I try and execute a c# powershell ...
0
votes
2answers
1k views

How can one perform TCP hijacking?

I am developing with an ASP.NET application that uses Windows Authentication. I have setup the web.config file to deny all unauthenticated users, and only allow users from a certain role. Using ...
0
votes
3answers
2k views

Outlook 2003 Profile needs to prompt for password

In outlook 2003 running on windows xp multiple profiles have been added for tellers. So when outlook starts up its asks the tellers which profile they want to use. for all but one users it then ...
0
votes
3answers
2k views

How do I prevent IIS from serving a type of file?

I don't want to remove entries from MIME lists, I just want to tell IIS to stop serving files with a particular extension. Why is it so difficult to get IIS to do something so simple as stop serving ...
0
votes
3answers
2k views

Java cannot resolve DNS address from AIX: UnknownHostException

I'm having this strange error. On AIX, I can reach my server from the command line ( using ping / telnet ) But If I try using java I've got UnkownHostException This is because Java cannot somehow ...
0
votes
2answers
259 views

Secure way to monitor and restart services that require password

Sometimes when the power goes out and the UPS dies before it goes back on, some services on our servers don't come back up. Namely some VMware virtual machines. I was thinking of setting up a ...
0
votes
3answers
894 views

Using a Security Group to Manage MS SQL 2005

I want to add an AD security group to my MS SQL 2005, which will contain the personal allowed to fully manage all aspects of the server. I have created the group (DOMAIN\SQL Admins) and added it to ...
0
votes
1answer
1k views

sshd_config GatewayPorts

Is there any reason why I shouldn't set GatewayPorts yes in my sshd_config file if the hosts are only going to be internal to the network?
0
votes
1answer
149 views

Windows Admin can not change the time

On my work laptop I have a local admin account that is in both the administrator group and the backup operators group. This the account cannot install windows updates or change the time. I've asked ...
0
votes
1answer
20 views

Nginx Password Protect Directory Downloads Source Code

I'm trying to password protect a WordPress login page on my Nginx server. When I navigate to http://www.example.com/wp-login.php, this brings up the "Authentication Required" prompt (not the WordPress ...
0
votes
3answers
58 views

Is there some free remote sniffer (aka sniffer on free remote server)? [closed]

I have this setup: ________Company LAN_______ _________ . '| _________ | | .| BUNCH OF | ...
0
votes
1answer
70 views

Installing VirtualBox and restricting NAT and Bridged Network Adapters for Corporate Security

I work as a developer in a security heavy finanical services company. As a group we are finding that our Windows 7 workstation security policy is preventing us from performing our jobs. We do not ...
0
votes
1answer
24 views

nginx not showing internal at directory

Below is my nginx configuration file. It should make /inc and /admin/inc internal, but I can access them normally, like the line doesn't even exist. It's not giving me a 404 for external requests like ...
0
votes
1answer
36 views

How to secure private communication among Apache servers with SSL (sign IP only)

I have 2 Apache servers (with PHP): public server A which hosts web pages, it has domain name etc. public server B which hosts some services (built as PHP application) and those services are used ...
0
votes
2answers
43 views

How to restrict access to root to daemon user?

I have Apache 2.4 with PHP 5.5.14 installed on latest Debian. According to Apache security tips&tricks I've set my httpd.conf to this: <Directory /> AllowOverride none Require all ...
0
votes
2answers
66 views

SecAst: Failing to Ban IP ''

To Generation D: This was the setup at time this issue was observed: secast-1.0.1.0-x86_64-ub12 on Ubuntu 12.04.4 Server LTS with Asterisk 11.10.2. The following events were captured and observed in ...
0
votes
1answer
28 views

SecAst: Premature Exit in Daemon Mode

To Generation D: This is a new problem with build secast-1.0.4.0-x86_64-ub12 that didn't happen with the previous build, secast-1.0.1.0-x86_64-ub12. When secast is run as a service (service secast ...
0
votes
1answer
31 views

Fixing Apache Struts XSS vulnerability

A recent network scan revealed the following vulnerability: Apache Struts s:a / s:url Tag href Element XSS. Here is a link with more info about this vulnerability: http://osvdb.org/show/osvdb/54122 I ...
0
votes
1answer
109 views

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account?

What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account? I tried to run script under local system account on the client which ...
0
votes
1answer
55 views

Computers in-scope for PCI DSS [closed]

I am trying to determine what servers & workstations, etc. that are in-scope for PCI compliance. PCI DSS SAQ-D states that any devices that "store, process or transmit cardholder data" are in ...
0
votes
2answers
117 views

Protecting my Bind dns server from slow kaminsky-style cache poisoning attacks

Dan Kaminsky described how DNS servers could be poisoned with spoofed DNS responses [1]. As I understand it, the problem was that Kaminsky found a way to account for most other sources of randomness ...
0
votes
1answer
105 views

IIS Webserver hosting intranet and public sites in DMZ

We have a webserver (VM) hosting several sites. One of the applications has a part intranet and a part public. (archiving/docflow = intranet, customer invoices = public) This webserver is currently ...
0
votes
2answers
37 views

If a web root directory has a simlink that points to a folder one-level up, does that pose a security risk?

Assuming a Linux/Unix system. Not asking about any particular server software, just wondering in general. I want to use this to include javascript libraries or things like that in multiple sites or ...
0
votes
1answer
60 views

How to autoban IPs that request URLs with a .php extension?

I've noticed in my linux/apache server logs that bot computers running muieblackcat are periodically trying to access all forms of phpmyadmin.php on my server. It's interesting, because I have a ...
0
votes
1answer
27 views

Linux package management and security flaws

Is there a mechanism built into rpm or apt that will warn (or prevent) a user from installing a package contains a known security threat? I'm thinking of an RPM like ...
0
votes
1answer
96 views

Lean but effective linux IDS / IPS / WAF? [closed]

I'm looking for a lean but effective IDS/IDP/WAF solution for my tiny VPS webserver. Currently I already use iptables and psad but a lot of the web server scanning attempts slip through. I use ngingx ...
0
votes
2answers
36 views

Security Help? Is this a safe way of doing things?

I am running Apache with Debian. At the moment to share my site I am just setting up my router to foward my local ip on port 80. So anyone who wanted to look at my site can just type in my router's ...
0
votes
1answer
33 views

In apache how do you validate that the logged in username matches the directory name?

Sometimes you want to setup a directory structure in apache such that logged in users can only see their own directory. (i.e. the directory name and the username match.) What do you put in the ...
0
votes
1answer
66 views

DDoS Attack Mitigation Techniques [duplicate]

Our hosting is set up on Amazon EC2 servers, which have been performing great. The problem we run into are spikes in requests for invalid URLs from scripts/bots looking for security holes. When ...
0
votes
1answer
97 views

Configure Apache to allow the access for the specific URL under VPN [closed]

Here is the case, I want to configure the Apache server so that some of the URLs can be accessed under VPN and some of them should be accessible with/without VPN. Here is my scenario Without VPN ...
0
votes
1answer
63 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
0
votes
1answer
49 views

Is a VPN right for restricting server access?

I would like to set up a Few QA servers for a web application, under the app domain, however I would not like these servers to be accessible to just everyone from the Internet. Ideally, the QA team ...
0
votes
1answer
42 views

removing process (and child process) access to file systems? [closed]

is there a unix-type free OS that allows me to remove all disk access for a specific process and any of its children? #!/usr/bin/perl -w use strict; use Perl6::Slurp; my $infile= ...
0
votes
2answers
79 views

Control IP to access a server , which use iptables

I would like to use linux command iptables to control to only allow the same subnet IP to access a server , what I would like to do is to allow any services from 10.168.1.0 to this server , could ...
0
votes
1answer
394 views

Why is OpenVZ less secure than KVM and XEN [closed]

I've read many forums and blogs and articles comparing OpenVZ, KVM and XEN. And I have seen many times that one of the negatives of OpenVZ is that its less secure. However, I have yet to see an ...