How To Eliminate The Ten Most Critical Internet Security Threats
SANS 6/1/2000
Here it is. This is the SANS sh#@t list of programs/configuration that cause security problems. Clear text passwords is one of the offenders! There is a Computer World article that discusses it as well. "The majority of successful attacks on computer systems via the Internet can be traced to exploitation of one of a small number of security flaws. Most of the systems compromised in the Solar Sunrise Pentagon hacking incident were attacked through a single vulnerability. A related flaw was exploited to break into many of the computers later used in massive distributed denial of service attacks. Recent compromises of Windows NT-based web servers are typically traced to entry via a well-known vulnerability. Another vulnerability is widely thought to be the means used to compromise more than 30,000 Linux systems."
News: Security Sources
