1
vote
2answers
1k views

Apache server ? Vulnerability check

We are running apache web server on fedora 8 and need to check for vulnerabilities. What should we check?
8
votes
5answers
821 views

How to check that a known Windows Vulnerability has been patched?

Is there a way in Windows to check that say Security Bulletin MS**-*** or CVE-****-***** has been patched? e.g. something akin to RedHat's rpm -q --changelog service Windows 2008 R2 SP1
0
votes
2answers
123 views

Scanning Vendors (non-PCI related) - Hype or Not?

For months now, when building websites for clients, I've come across virtually trillions of "Site Security Scanners" supposedly endorsed/approved by various shared web hosts who claim to run XSS, SQL ...
0
votes
2answers
66 views

images security

How I can check all my images on server, they don't prepared with maulicious code ? I mean for example Gif PHP exploits and so on...
0
votes
6answers
2k views

Is my dns server being attacked? And what should I do about it?

I've been having some intermittent dns problems with a web server, where certain isp's dns servers don't have my hostnames in cache and fail to look them up. At the same time, queries to opendns for ...
2
votes
2answers
638 views

Has anyone run an objective comparison of Nessus and Skipfish

We recently set up Nessus, but the annual cost is not cheap. Recently Google published SkipFish which appears to compete in the area of webapps. As best I can tell, Nessus operates via a large ...