[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] Will a future Code Red Version ever effect Linux????
- Subject: Re: [cobalt-users] Will a future Code Red Version ever effect Linux????
- From: "Kevin D" <kdlists@xxxxxxxxxxxxxxx>
- Date: Tue Aug 7 22:29:04 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
From: "Paul Brown" <paulb@xxxxxxxxxxxx>
> I was just wondering if a future version of code red could ever effect a
Linux system?
Not by the Code Red type worms, because they use a Microsoft-specific bug.
> Is Linux open to such buffer overflow attacks?
Vulnerabilities of a similar nature have been discovered for programs
running on linux systems. One good example was bind, for which a buffer
overflow was discovered. A number of worms, which essentially operated the
same way that code red did, were written to take advantage of this hole.
> Im probably quite a bit behind in security updates, where is the best
place to find the patches and advice on installing them?
http://www.cobalt.com/support/download
Installing them is easier than falling off a log, provided you didn't make
any serious changes to your system. If you don't have the latest patches
installed, you are a serious target.
It is your responsibility to maintain the security of your server. Cobalt
has made this relatively easy for you, but you have to take the initiative
and be proactive.
Most hacks happen because of inept administrators. Don't be one of them.
Kevin