Networks

Ask something
Discussion Locked

Linux Vulnerabilities Issues!

0 helpful
4 replies

by dhrupod

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hii All,

I am back again! With some questions and doubts!
I was trying to find a way to do some research on linux systems vulnerabilities!

Recently I was accessing my shared hosting servers raw access logs and other audit data! I found some logs with some not-so-familiar strings! While doing some searches on google I came to a concept that these might reflect unix/linux system vulnerabilites.

One of the strings contained denied access from an un-familiar ip (to me) to
/cgi-bin/.htaccess , how and why would someone try this? Can anyone give any hint please?

Regards

4 replies

by hal 9000

[i]One of the strings contained denied access from an un-familiar ip (to me) to
/cgi-bin/.htaccess , how and why would someone try this? Can anyone give any hint please?[/i]

Are you saying that because someone else couldn't get in this is a weakness?

But do not believe that Unix/Linux is perfect it's most certainly not. It is however more secure than any Windows Platform but there is always room for improvement.

by dhrupod

Hii Hal9000, My intention of this post was not to start an argument on which one is safer or better platform.

Rather, I wanted to know the route or some resources to study the vulnerabilities issue to UNIX platform! For example, i just learned about some issues with older-version-of-media wiki which are considered to be "risky" for unix or linux servers. (talking of XSS vulnerability), was wondering how do i start the hunt for more information on this type of issues).

by jaqui

different site's security vulnerability alerts.

sites like secunia.com sans.org ...

most website scripts are actually CROSS PLATFORM not os specific vulnerabilities. This is from poor coding on part of the script developers.

by saurondor

.htaccess files can be thought of as "distributed configuration" of your server. It applies to the directory it is in (and subdirectories). It can contain security/authentication information. In a properly setup server it should not be served through http. Yet if your server allows it to be shown the viewer can learn about passwords or setups you don't want him to. I don't think it seems to be the case because you mention it was denied access.

This discussion is closed to new replies.