Top Security Issues for SysAdmins, Executives and Users

Tue, 07/25/2000 - 11:16 — charlie.collins

The SANS Network Security team has compiled several very interesting lists, they include the "ten most critical Internet security threats", "the ten worst security mistakes information technology people make", "the five worst security mistakes end users make" and the seven worst security mistakes senior executives make."

SANS is sponsoring the "Sixth Annual Conference on Securing Networks and Systems" in Monterrey California this coming October. The courses and topics are awesome but too numerous to list (as are the contributing sponsors, all the big guns and then some will be there.) If you get a chance check out the SANS website and or go to the conference.

Also note that SANS is sponsoring several industry security certifications that look promising also. Check the site for details (Security certs GOOD, insecurity BAD.)

Here is an example of the lists.

ten most critical Internet security threats

1. BIND Weaknesses, nxt, qinv and in.named allow immediate root compromise.

2. Vulnerable CGI Programs and application extensions (e.g. Coldfusion)

3. Remote Procedure Call (RPC) Weaknesses

4. RDS Security Hole in the Microsoft IIS Server

5. Sendmail buffer overflow weaknesses

6. sadmind and mountd

7. Global file sharing and innapropriate sharing via NetBIOS such as Windows file sharing and or Samba (ports 135-139, 445 in win2k, UNIX NFS, Macintosh Web Sharing.)

8. Weak or non exisitent passwords (including root level such as Microsoft SQL servers on the Internet with default blank sa user id and no password .)

9. IMAP and POP buffer overflows

10. SNMP community strings using public or private.

Wow, most of these are common sense and have even een explicity reported on ToTSP, these are the obvious yet all too often overlooked holes in the net. The other lists are also very interesting (including the mistaked by users, IT people and execs), check the SANS site via the link for more info on those.)

Final Word: SANS is good stuff, keep and eye on security constantly and never employ Microsof products where security is a concern. SANS