Security

---

SANS Top 20 Vulnerability List

There's a new SANS (SysAdmin, Audit, Network, Security) Top 20 list of security vulnerabilities. This is a list of the top 20 vulnerabilities in Windows and UNIX. 

Top Vulnerabilities to Windows Systems

1. Internet Information Services (IIS) 
2. Microsoft SQL Server (MSSQL) 
3. Windows Authentication 
4. Internet Explorer (IE) 
5. Windows Remote Access Services 
6. Microsoft Data Access Components (MDAC) 
7. Windows Scripting Host (WSH) 
8. Microsoft Outlook Outlook Express 
9. Windows Peer to Peer File Sharing (P2P) 
10. Simple Network Management Protocol (SNMP) 

Top Vulnerabilities to UNIX Systems

1. BIND Domain Name System 
2. Remote Procedure Calls (RPC) 
3. Apache Web Server 
4. General UNIX Authentication Accounts with No Passwords or Weak Passwords 
5. Clear Text Services 
6. Sendmail 
7. Simple Network Management Protocol (SNMP) 
8. Secure Shell (SSH) 
9. Misconfiguration of Enterprise Services NIS/NFS 
10. Open Secure Sockets Layer (SSL) 

It is also recommended that for good perimeter security that the following ports are secured to prevent access to the system or network.

IMPORTANT - Blocking these ports does not prevent them from being used by systems compromised by viruses, trojans and so on.  Take care to secure systems from being compromised by using effective, up-to-date anti-virus scanners.

NOTE - Blocking some of these ports may disable services that are required.  Bear this in mind before making changes.

If you just secured your system against these 20 things, you'll have a pretty safe system!

More information and downloads available from: http://www.sans.org/top20/

Adrian Kingsley-Hughes
Last updated: May 4th 2004
Print This Page   |   Email me when this page changes    |  Search This Site

• Fake Security Apps
• IE7: Low Rights
• Spyware Popups
• Media View vs Real World
• A Real Site??
• SP2 Info Bar or not?
• Google AutoLink Raises Eyebrows
• Unchecked Buffers
• Secure Disk Destruction
• Disabling UPnP
• Useful Security Products
• Vulnerability List
• 3 Steps to Protect your PC
• Safe and Unsafe File Extensions
• Browser Encryption

• How secure is that password?
• Double Entry Passwords
• How are passwords stored on websites?
• Passwords and Internet Cafes
• WEP Strong Key Generator
• WPA Random Key Generator
• Make Me A Password
• Choosing Good Passwords
• More on Passwords

• Viewing Images in Email
• 419
• Spam Uncanned
• More Spam
• Latest Spam Tricks
• Bogus Bulletins
• Spam & Ham
• Outlook Read Receipts

• New Norton for Vista
• Virus Alerts
• Virus Types
• Virus Hoaxes
• Live update Problem
• More Live update Issues
• Norton 2005 problem

Out Now!

Get ready to Build your own custom PC!

>> ORDER TODAY!!