CentOS is a free operating system distribution based upon the Linux kernel. It is derived entirely from the Red Hat Enterprise Linux (RHEL) distribution.

learn more… | top users | synonyms

-1
votes
2answers
41 views

How can I prevent booting from media devices?

first of all, I deeply apologise because of my silly question. The thing is that I am learning about hardening. I have VMware workstation 12, and I've created a VM CentOS 7 machine (to be integrated ...
2
votes
1answer
105 views

Are there any exploits in Movable Type that allow the attacker to delete the movable type files?

I'm a developer for a web site; we have a small blog powered by Movable Type that we added a few years ago. The blog doesn't get a lot of traffic or attention; we just noticed a couple of days ago ...
2
votes
1answer
591 views

Nessus scanner and Red Hat backport security updates

I have asked this question: False positive Apache version in scanner results on Centos I need additional clarification: Do you know if it is possible to configure Nessus to adopt Red Hat backport ...
1
vote
0answers
391 views

OSSEC not detecting deleted files?

I have configured 3 VMs: ossec server and two agents in CentOS 6 and Windows 2k8 R2. I have completed the setup and FIM and Log Management works smoothly. It also reports the new files. However, it ...
1
vote
0answers
188 views

Test S/KEY support for PCI compliance - CVE-2007-2243

In order for our business to be PCI compliant, we need to prove that we are not vulnerable to CVE-2007-2243. This states that: OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is ...
0
votes
0answers
13 views

MySQL 5.1 patch

In my case, MySQL 5.1 is running on Cent OS 6.7 MySQL 5.1 being the oldest version of database, can someone help with the medium of getting latest patches for the same? Up gradation to the higher ...
0
votes
0answers
35 views

Why /proc/self/environ no output through injection

What on a CentOS machine would stop a null byte injection from displaying the output of /proc/self/environ and /proc/$PID/environ or /proc/$PID/fd/12 ? According to this article, all folders under /...
0
votes
0answers
59 views

null byte injection no response from environ

I have a challenge I'm working and I need some advice please. I found 2 null byte injection points on the web service, both of which gives me the contents of /ets/passwd when I do old ../../../../../...