Security is not a product, but a process.
3
votes
4answers
60 views
If, using public keys only, an SSH client logs into (or is already logged into) a compromised SSH server, is the SSH client at risk too?
Are there conditions under which an attacker with control over the server could gain access to and initiate actions on the client? I realize the attacker could plant trojans on the server in the hope ...
0
votes
0answers
11 views
User security settings for scheduled task on Windows Server 2008 R2
I have a simple executable to run as a scheduled task on some Windows Server 2008 R2. The executable downloads a file from a couple of locations, then writes the time to download the files to a SQL ...
0
votes
0answers
7 views
Disabling Server Header from Groupwise Mobility
My Groupwise Mobility server application sends a server header with name and version. Is there a configuration possibility so I can disable it somehow? I couldn't find anything helpful so far.
3
votes
6answers
10k views
SQL Server 2008 login problem with ASP.NET application: Failed to open the explicitly specified database
I am running SQL Server 2008 Express Edition on Windows Server 2008 with an ASP.NET application which must access the server. The ASP.NET application is associated with an application pool that runs ...
4
votes
4answers
964 views
How do you configure a MS SQL Server to prevent exposing all database names and logins to any authenticated user?
I'm new to MS SQL and asking this question as a web developer with limited sysadmin experience who desires his service providers to use best practices.
We have one database on a remote MS SQL server ...
5
votes
6answers
858 views
What resources are best for staying current about information security? [duplicate]
What types of sites do you visit, on a regular basis, to stay current on information security issues? Some examples from my list include:
http://isc.sans.org/
http://www.kaspersky.com/viruswatch3
...
0
votes
1answer
24 views
Is It Possible to Copy an AWS Security Group?
We have some security groups that have quite a few rules in them. Rather than having to recreate the same rules for a number of security groups just to accommodate minor differences, is it possible to ...
3
votes
1answer
661 views
how to restrict null session
I've changed the following things in regedit and restarted PC to restrict null session:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA
Value Name: RestrictAnonymous
Data Type: REG_DWORD
...
-1
votes
1answer
30 views
Access Control Lists & DHCP
Please take a look at this image right here.
In the image above you can see a virtual netwerk simulation program (CISCO Packet Tracer 6.0) where I'm trying to setup a network and secure it.
However ...
0
votes
1answer
25 views
How can I configure a Ubuntu LAMP web server with permissions like CPanel?
I know how to set up a LAMP stack on Ubuntu pretty well for a single website / single user, but I'd like to allow multiple users to host multiple sites on a single server.
This is for different ...
0
votes
2answers
48 views
Should I be concerned with seeing this in my logs?
The following requests (this is about half of them) in my Nginx access log have all come over the span of a few minutes from an IP that is registered to an ISP in Vietnam (I could provide the IP, but ...
2
votes
1answer
33 views
Remote disk monitoring with WMI without admin rights
I am setting up a restricted WMI group that should be able to read WMI information from my remote hosts.
I have the group set up as member of the remote DCOM and performance monitor groups. I also ...
-1
votes
2answers
46 views
su command works without prompting password
I'm on a RHEL server where the su command drops the user into root without prompting for a password. Obviously, this is a pretty big cause for concern which I'd like to fix. I'm not in contact with ...
8
votes
5answers
8k views
What steps should I take to secure Tomcat 6.x?
I am in the process of setting up an new Tomcat deployment, and want it to be as secure as possible.
I have created a 'jakarta' user and have jsvc running Tomcat as a daemon. Any tips on directory ...
1
vote
1answer
23 views
Windows 7: Update a file in the system32 folder via GPO
I'd need to update a Windows file in the system32-folder
I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine.
I've created a ...
0
votes
0answers
7 views
What permissions are required to change log on as service policy
I have a Windows 8 Pro machine running Hyper-V, and several virtual machines.
I am getting the issue that has been discovered whereby you occasionally get an error message when ...
-2
votes
0answers
23 views
FTP Chroot Broken or what [closed]
In regards to https://www.facebook.com/SolidShellSec/posts/580682168629285 they say PureFTP has broken CHroot system and symlinks can be followed? What is this bug? Is is patchable or should I switch ...
2
votes
0answers
56 views
Restricting access through ODBC to only schema views SQL 2008
I'm pretty green to SQL security, so maybe someone can help me. We've got a database application that, when installed, by default grants the public role access to all the tables in the database. When ...
-3
votes
1answer
38 views
Can I block android phones from my company wireless network? [duplicate]
Network is password protected, all employees have access to password. Company policy is only company approved and provided devices are allowed on network. We can not tell who is logging in on ...
3
votes
1answer
602 views
certutil -ping fails with 30 seconds timeout - what to do?
The certificate store on my Win7 box is constantly hanging. Observe:
C:\>1.cmd
C:\>certutil -? | findstr /i ping
-ping -- Ping Active Directory Certificate Services Request ...
2
votes
4answers
2k views
Remove SID with ICACLS
I am trying to remove an obsolete SID (the account was apparently deleted).
I've tried to run the following on the server (win2003) and a client (win7):
icacls c:\path /remove ...
1
vote
2answers
650 views
Default document not working after installing SP1 on Windows 2008 R2 x64
We have a web site that should only be available for authorized users. So we deny anonymous access for the site. However we do allow anonymous access to the default page and the login page.
When we ...
0
votes
1answer
32 views
curl fails to take self signed certificate
I've installed apache 2 server with self signed certificate.My browser is showing 'It works!' when I tried to connect to the sever. But from an application when I issued cur_easy_perform() the call ...
0
votes
1answer
36 views
Security of NameVirtualHost in regard to HTTP request forgery
If I understand the concept of NameVirtualHost correctly it works by reading the Host variable of every HTTP request and matching it to a ServerName in any active VirtualHost directive with the ...
0
votes
1answer
17 views
What are the security implications of STARTING a reverse proxied origin server as an unprivileged user?
A common recommendation as part of web server security is to run the server daemon as an unprivileged user (e.g.: nobody) so that exploits executing arbitrary code may have less unwanted effects. ...
0
votes
0answers
9 views
Setup cherokee as a shared hosting platform
I would like to use cherokee webserver to host multiple websites NOT on one account, simular to cPanel(I don't need or want all cPanel has to offer and as far as I know still can't use Cherokee) . In ...
0
votes
2answers
20 views
apache: restricting access by network
Im working on a (linux based) device that has 4 network interfaces: two wired, one wireless and a VPN. The device has a web 'control panel' of sorts that I want to restrict access to. Ideally it ...
0
votes
1answer
29 views
Ubuntu Server DDoS protection
I've seen many articles on DDoS protection, but none work. I need protection for a socket server i'm running on the server. It's running on port 9876 and it's for a flash-based game. when it gets ...
-1
votes
1answer
22 views
How to disable SSL/TLS compression in Apache 2.2.16?
I have one sever running on Apache 2.2.16. I run the VA scanner on the server. According to the VA report it is recommended that SSL/TLS compression should be off.
I tried to search google, but didnt ...
4
votes
7answers
311 views
Configure a “hardened” user account that an attacker would have a hard time abusing
Suppose you have a Windows Server machine running various sensitive services. Suppose that one of these services is pretty simple, maintaining a small amount of information in a text file, but as a ...
0
votes
1answer
959 views
Use SECEDIT to export “Security Options” from one computer and import on another
Can I use secedit.exe to export out the "Security Options" from the local security policy and then import them on another machine?
I'm trying to do this on Windows Server 2008.
Update
I just tried ...
-1
votes
1answer
20 views
SSL secured account section, Subdirectory vs Subdomain [closed]
I'm currently running Drupal on an nginx server, and I also have a separate user account system running on account.domain.com. I purchased a wildcard SSL certificate to protect the login form, but the ...
1
vote
1answer
41 views
Given an Amazon Web Service Security Group, how can I find out what the IP's are?
I'm looking at using a cloud service which has an AWS Security group...
I've got a hardware firewall and a software firewall.
I have no idea how to say: Given that security group, allow any ...
7
votes
4answers
6k views
How to create a limited “domain admin” that does not have access to domain controllers?
I'm looking to create an account similar to a Domain Admin, but without access to domain controllers. In other words, this account will have full Administrator rights to any client machine in the ...
-1
votes
1answer
71 views
how is possible to become root without having the password and only a ssh login?
I am having a problem, I have one server, I have my root account, but some other co worker has an ssh login, still... I have no so much experience and I dont know what I could do to block him to ...
3
votes
1answer
64 views
Traffic backlogged after (D)DoS attack? [closed]
About 25 hours ago, I got an e-mail from UptimeRobot (uptimerobot.com) telling me that me websites had gone down.
I raced over to my server room, where my TP-Link router was completely unresponsive ...
1
vote
1answer
61 views
Limited SSH access for log retrieval
I want to have limited access to a Linux server to be able to grab a certain set of logs. Ideally, I would like to be able to run rsync locally to grab the logs from the server and for security ...
-1
votes
0answers
27 views
motion - usb camera not working on monitoring server [closed]
I had a Debian Squeeze server running, which monitored our building with cameras. I installed a new server now with Debian Wheezy and all except on camera are working. It's a USB camera(Pixart ...
3
votes
1answer
55 views
How can I proactively detect compromised Exchange 2010 accounts?
We have had issues with compromised Exchange accounts sending out malicious e-mails via SMTP and OWA.
It seems that many of these accounts were compromised via incoming phishing attempts. We are ...
1
vote
2answers
2k views
How do I grant a database role execute permissions on a schema? What am I doing wrong?
I am using SQL Server 2008 Express edition.
I have created a Login , User, Role and Schema.
I have mapped the user to the login, and assigned the role to the user.
The schema contains a number of ...
4
votes
2answers
75 views
Should I delete the .pfx or .cer files after importing the SSL cert?
When provided, I have to import into IIS on Windows Server (2008 R2) using either a .pfx or .cer to get SSL certs ready for use.
My question is, is should I delete these files after I have ...
0
votes
1answer
36 views
How to update/maintain a patched kernel?
If I patch my linux kernel with grsecurity, will I still be able to update my system with yum (or apt-get)?
Won't the updates available via yum be incompatible with my patched "non standard" version ...
16
votes
1answer
372 views
What's the importance of the email address in the DNS SOA lookup?
Is there a real importance in this, except to publish the email address of the person responsible for some DNS zone?
In our BIND configuration, we put a mailling list as the responsible for our ...
0
votes
2answers
1k views
WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine
I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
0
votes
3answers
2k views
Windows Server 2003 W3SVC Failing, Brute Force attack possibly the cause
This week my website has disappeared twice for no apparent reason. I logged onto my server (Windows Server 2003 Service Pack 2) and restarted the World Web Publishing service, website still down. I ...
0
votes
3answers
28 views
VPS security considerations when only accessing from one IP [duplicate]
I'm running an VPS where I have deployed some projects. As I am the only person who accesses the server and I furthermore have a fixed IP i decided to configure iptables so that server access is only ...
47
votes
8answers
45k views
Dealing with HTTP w00tw00t attacks
I have a server with apache and I recently installed mod_security2 because I get attacked a lot by this:
My apache version is apache v2.2.3 and I use mod_security2.c
This were the entries from the ...
1
vote
2answers
43 views
How to configure transport CONFIDENTIAL in Apache HTTPD server?
We had only one VirtualHost in our Apache 2.2 server configuration:
<VirtualHost _default_:443>
Our customers want be able to put in the browser only the server name in HTTP (e.g. 10.10.0.1) ...
0
votes
1answer
16 views
Using authority-given .cer file to login on remote servers on OS X
A few months ago I bought a certificate from a popular certification authority (Certum). I used it to sign emails, but today the admin at my work asked me to connect to our main server via ssh. He ...
2
votes
2answers
71 views
VLAN & Communication
I'm working on a project regarding Network Security and I've come to the topic regarding VLANs.
I was wondering if it is possible to set up multiple VLANs (VLAN0, 10, 20, 30) in a way that all VLANs ...
