SANS/FBI Releases the Twenty Most Critical Internet Security Vulnerabilities

jeremy · 10-03-2002, 07:44 PM

SANS and the FBI has updated their list of the 20 most critical "Internet Security Vulnerabilities". Still find it hard to believe that Accounts with No Passwords or Weak Passwords made the top 20. Who does this??

http://www.sans.org/top20/

--jeremy

Half_Elf · 10-03-2002, 08:44 PM

Very nice site

I wonder why IIS is in top position. unable to handle unanticiped request"
What's a such pathetic web server

Mara · 10-04-2002, 04:52 PM

I guess the entry "Accounts with No Passwords or Weak Passwords" (especially in Unix systems) is rather about weak passwords (quite common) than about having no password at all (very rare).

tangle · 10-04-2002, 11:20 PM

Half_Elf,
I called MS a while back for help with Win2000. One of the things that the woman asked was if I was running IIS. I told her no. She said "Good, if you where I would have told you to remove it". Kinda make you wonder how much MS reall stand by thier product. HAHAHAHA

Jargon · 10-07-2002, 06:37 PM

Nice site!
Makes me wonder more and more about the security on the net!
I was even told that proprietary software for on line banking was not not as secure as the bank tells you!