wscript.exe, and xcopy.exe. Unix tools or utilities that should be restricted are

debuggers, compilers, and scripting languages such as gcc, perl, etc. . The least privilege concept also applies to server applications. Where possible, run services and applications under a non-privileged account. Application Auditing Most server-level applications have extensive auditing capabilities. Auditing can be of value in tracking down suspected or actual intrusions. Enable auditing for server applications and audit access to key files (such as those listed above) that an attacker might use once he has gained a foothold on a compromised server. Network Printer Today’s network printers contain built-in FTP, WEB, and Telnet services as part of their OS. Enabled network printers can be readily exploited and are often overlooked by system administrators as a security threat. These network printers can and are often exploited as FTP bound servers, Telnet jump-off platforms, or exploited by web management services. Change the default password to a complex password. Explicitly block the printer ports at the boundary router/firewall and disable these services if not needed. Simple Network Management Protocol(SNMP) SNMP is widely used by network administrators to monitor and administer all types of computers (e.g., routers, switches, printers). SNMP uses an unencrypted "community string" as its only authentication mechanism. Attackers can use this vulnerability in SNMP to
Next topic
Previous topic