ZDNet Australia: Top Linux/UNIX Security Threats

"It's depressing for security professionals to see just how many of the vulnerabilities on the new SANS/FBI Top 20 List have CVE numbers in the 1999-xxxx range--meaning that they were identified and fixed years ago on some systems.

"Newer problems appear in each category, but far too many bear old CVE numbers.

"The SANS/FBI Top 20 List tracked actual attacks and listed them according to the frequency of their occurrence. My previous article examined Windows vulnerabilities on the list. Now, I'm going to look at the UNIX vulnerabilities, nearly all of which also apply to Linux..."

Complete Story

Related Stories:

• OWASP.org: A Guide to Building Secure Web Applications, Version 1.1(Sep 25, 2002)
• ZDNet UK: ISIS to Provide 'Open Source' Security Information(Aug 06, 2002)
• Crossnodes: Audit Your LAN Before the Bad Guys Do with nmap(Jul 19, 2002)
• Help Net Security: Security in Open versus Closed Systems - The Dance of Boltzmann, Coase and Moore(Jul 09, 2002)