Tag Info

New answers tagged

0

chroot is enough to contain a compromised service; even if the attacker has root access he cannot break out of the assigned root directory and/or run commands that may impact the "host" machine. On the other hand, the attacker may use the chroot-ed system for further privilege escalation and/or launch attacks on highly sensitive targets. An attacker can ...


0

It depends upon the vendor, and it may rely upon inference. That is why we use vulnerability scanners, and why vulnerability scanners err on the side of assuming guilt given unclear evidence. Vendor At least one vendor, Red Hat, maintains a vulnerability-to-CVE mapping database, where they list all CVEs that apply to software in their distribution. The ...


0

This is exactly what vulnerability scanners do. They just aren't great at it (none I've ever seen detect ALL unsupported software, and I doubt they will any time soon!). Generally all vendors have their own way of disseminating this information - if they do at all - which is a major pain for asset owners and security specialists. For vulnerabilities ...


4

There are a few possible scenarios, even after assuming Man in the Middle is not happening. Missing patches: If your system is missing a patch that allows RCE, that is an easy win. There are plenty of remote exploits that exist, and new ones every so often. Mitigation: Patch your system! Are you on a domain? You didn't mention Windows 7 Home or ...


1

Security is a process, where new software bugs are discovered from time to time. Sometimes by good people, and sometimes by bad people. Software bugs can be discovered in both user software, like Excel, but also in OS network stack. Windows 7 is based on rather well tested code, in which hundreds of remote vulnerabilities were found and patched during last ...



Top 50 recent answers are included