Web Server Configuration

Even the most cautious and attentive company can be vulnerable if the network services it chooses are inherently insecure. Many services, for example, are built with the idea that they will be utilized on a secure network; however, this assumption falls apart once the service is made available on the internet, which is unsafe in and of itself. Authentication with unencrypted usernames and passwords falls into the category of unsafe network services. Telnet and FTP are two examples of these types of services. A hacker tracking the communication between a distant user and a service like this can easily collect usernames and passwords. Certain attacks may target these services as well. A hacker redirects network traffic to your system instead of the target server in this type of attack. Once a user enters into a server’s remote session, the attacker’s workstation functions as an unseen conduit, capturing data between the remote service and the innocent user. A hacker can capture administrative passwords and data in this manner without the server or user realizing it. Network file systems and information services, such as NFS or NIS, are another category of insecure services that were designed for LAN use but have sadly been extended to cover WANs (for remote users). As default, NFS has almost no verification or security protocols in order to prevent an attacker from launching and accessing an NFS shared directory. In a plain text ACSII or DBM (derived from ASCII) database, NIS also stores essential information that must be known by every machine on the network, such as passwords and file permissions. A hacker who gains access to this database has complete visibility to the network’s user accounts, including the account of the administrator.