The tag has no wiki summary.

learn more… | top users | synonyms

4
votes
1answer
56 views

CVE-2014-0196 Vulnerability for CentOS

Trying to patch CVE-2014-0196 Vulnerability but yum can't find packages updates CentOS 6.5 (Final) Panel version: 11.0.9 Update #61 # uname -r 2.6.32-358.11.1.el6.x86_64 # yum update kernel Loaded ...
0
votes
1answer
84 views

How to expose securely a Node.js/Express server into the real world?

Essentially I would like to know what the title suggests. Node.js/Express is nice. However, node is a fairly recent thing and hence there may be security risks by exposing the server to the real ...
1
vote
1answer
301 views

Chown in sudoers file : Safe or not?

Is it safe to add this command in sudoers file? mike ALL= NOPASSWD:/bin/chown -R www-data\:www-data /var/www and this is the only command that I want to run $mike@ubuntu: sudo chown -R ...
1
vote
1answer
69 views

security issue with paypal on cpanel box

Is there a way with CSF, CXS or LFD (or any other method) to automatically alert via sms or email of any new scripts, files or directory names with "paypal.com"? I've been notified by PayPal ...
-2
votes
2answers
77 views

How do I report vulnerability in sudo? [closed]

I have found a vulnerability in sudo and I was able to reproduce it on multiple instances of xubuntu. It didn't seem to work on debian. How do I report it properly? I have read so much about ...
2
votes
1answer
358 views

Is this a DNS vulnerability or exploit?

Our server (windows 2008 R2 server, fully patched) this morning was a bit slow. Checking network activity I found several DNS sessions using quite a lot of bandwidth (10MB/sec per session). This was ...
-1
votes
1answer
763 views

Stealing internet by changing MAC address? [closed]

OK - I have a static IP - and I have been on the same provider for years - its a wired network (a cable goes directly to my network card) - and the cable is connected to a switch on a pole in the ...
0
votes
0answers
38 views

Vunlerability auditing for network devices

I'm looking for a tool/software to cross-check my network device configs (Cisco, etc) against matching relevant vulnerability feeds. Therefore, if there is an SSH vulnerability in my Cisco IOS code ...
1
vote
0answers
153 views

How to identify vulnerability (.htaccess files have been added/modified) [duplicate]

Possible Duplicate: My server's been hacked EMERGENCY All the .htaccess files inside doc roots of all my virtual hosts seem to have been hacked and have the following code prepended to ...
1
vote
1answer
54 views

Check that NLM is patched in Netware 6.5

We need to solve vulnerability CVE-2011-4191 "Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or ...
2
votes
4answers
1k views

Tomcat denial of service

The last two days our Tomcat 5.5 Linux-based webserver has been broken down within minutes by starting thousands of downloads and stopping them. Some request paths in the access log end with a ...
5
votes
2answers
656 views

Finding Webserver Vulnerability

We operate a webserver farm hosting around 300 websites. Yesterday morning a script placed .htaccess files owned by www-data (the apache user) in every directory under the document_root of most (but ...
1
vote
3answers
224 views

how to protect our server from hacker

our website server was frequently gotten hacked recently.how can i protect it
0
votes
4answers
532 views

How to find systems with vulnerability which may later become agent for DDoS?

How to determine the systems with vulnerability, which scanning tool is best. The system should be identified so that it can be used as agent for DDoS. In a test bed environment I want to check ...