Re: [PLUG] weak linux firewall?

["Jesse Schultz" <schultj@netaxs.com>]

There are several browser vulnerabilities that allow access to your hard
drive and all the info on it.  the latest IE security roll up is here.
http://www.microsoft.com/windows/ie/downloads/critical/Q319182/default.asp

Also, since you have SSH open, go to the security page of your distribution
and make sure you have the latest openSSH since anything older than about 7
or 8 months is open to root compromise.

Fire walls are good but they are not the end all be all.  You must have
security in depth.

----- Original Message -----
From: "Samantha Samuel" <ssamuel@taz.cs.wcupa.edu>
To: "Philadelphia Linux User's Group" <plug@lists.phillylinux.org>
Sent: Monday, April 01, 2002 10:27 AM
Subject: Re: [PLUG] weak linux firewall?


> Just so everyone is in the clear. The nmap below was done from the
> internal network. I did an external nmap and only the ssh port showed up
> as open. I sent the entire nmap, but it has to ve reviewed, since the
> email is >20K. So I apologise for redundancy.
>
> > Port       State       Service
> > 21/tcp     open        ftp
> > 22/tcp     open        ssh
> > 80/tcp     open        http
> > 139/tcp    open        netbios-ssn
> > 515/tcp    open        printer
> > 6000/tcp   open        X11
> > 6004/tcp   open        X11:4
>
> -Sam
>
>
> ______________________________________________________________________
> Philadelphia Linux Users Group       -      http://www.phillylinux.org
> Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
> General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug
>


______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug