Linux Today: Linux News On Internet Time.

More on LinuxToday

Security Linux News for Sep 28, 2001

  • Conectiva Linux Security Announcement - mod_auth_pgsql (2001-09-28 17:24:39)
    "'mod_auth_mysql' is an authentication module for apache which authenticates users against a PostgreSQL database. RUS-CERT discovered a vulnerability[1][3] in several Apache authentication modules which use SQL databases to retrieve user information. This vulnerability allows a remote attacker to change the query that the module sends to the SQL server and circumvent the authentication process."

  • CNN.com: Microsoft stands by IIS despite Gartner recommendation (2001-09-28 13:02:35)
    "Palo Alto, Calif.-based law firm Fenwick & West LLP is planning on migrating off of its IIS servers to a Linux operating environment running Apache's Web server software. ... The law firm escaped being hit by last week's Nimda virus because it had all the appropriate patches in place. But the experience of dealing with a previous IIS-related vulnerability and the continuous effort needed to keep it secure aren't worth it, Kesner said."