eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.
SANS/FBI Top 20 Most Critical Internet Security Vulnerabilities:
Top Vulnerabilities to Windows Systems
- Internet Information Services (IIS)
- Microsoft Data Access Components (MDAC) — Remote Data Services
- Microsoft SQL Server
- NETBIOS — Unprotected Windows Networking Shares
- Anonymous Logon — Null Sessions
- LAN Manager Authentication — Weak LM Hashing
- General Windows Authentication — Accounts with No Passwords or Weak Passwords
- Internet Explorer
- Remote Registry Access
- Windows Scripting Host
Top Vulnerabilities to Unix Systems
- Remote Procedure Calls (RPC)
- Apache Web Server
- Secure Shell (SSH)
- Simple Network Management Protocol (SNMP)
- File Transfer Protocol (FTP)
- R-Services — Trust Relationships
- Line Printer Daemon (LPD)
- Sendmail
- BIND/DNS
- General Unix Authentication — Accounts with No Passwords or Weak Passwords