Security Basics mailing list archives

Re: Ten least secure programs


From: "Dan Duplito" <danduplito () techie com>
Date: Tue, 01 Jul 2003 15:45:29 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"Chris Berry" <compjma () hotmail com> wrote:
Subject: Ten least secure programs

I'm putting together a list of what seem to be the ten least secure computer
items in use today with the idea of having a set of things to recommend
AGAINST people using, probably to be posted on the IT room door with a note
like "NO, you cannot use the following!!".  Here is what I have so far, I'm
looking for additions and comments.  The list is in order from with the
worst offender being number one.  These should be products whose inheirent
design is flawed, not that are just difficult to secure.  I expect vigorous
discussion. *putting on flame retardent garments*  Oh, and leave Operating
systems out of this one.

1) Microsoft Outlook
2) Telnet
3) Sendmail
4) IIS Server
5) Wireless networking
6) PHP

  7) BIND
  8) IE

 9) ?
 10) ?

-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.3

wkYEARECAAYFAj8BO8MACgkQFY1KQME/frlTcwCgpPp/cMxvlkT5m8ryc2nsyjPyHUEA
oL82GmJacmOXmsJyn2PIjJ1Wyjb4
=9kOo
-----END PGP SIGNATURE-----


---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: