|
Top Vulnerabilities
Top Vulnerabilities to Windows Systems
-
W1 Internet Information Services (IIS)
-
W2 Microsoft SQL Server (MSSQL)
-
W3 Windows Authentication
-
W4 Internet Explorer (IE)
-
W5 Windows Remote Access Services
-
W6 Microsoft Data Access Components (MDAC)
-
W7 Windows Scripting Host (WSH)
-
W8 Microsoft Outlook Outlook Express
-
W9 Windows Peer to Peer File Sharing (P2P)
-
W10 Simple Network Management Protocol (SNMP)
Top Vulnerabilities to UNIX Systems
-
U1 BIND Domain Name System
-
U2 Remote Procedure Calls (RPC)
-
U3 Apache Web Server
-
U4 General UNIX Authentication Accounts with No Passwords or Weak
Passwords
-
U5 Clear Text Services
-
U6 Sendmail
-
U7 Simple Network Management Protocol (SNMP)
-
U8 Secure Shell (SSH)
-
U9 Misconfiguration of Enterprise Services NIS/NFS
-
U10 Open Secure Sockets Layer (SSL)
(Source: SANS)
FRENCH IP-COMMISSION PROMOTES
SPYING
On 26 June a special copyright advisory board within the French Ministry of
Culture published a report supporting government plans to increase
surveillance of Internet users as part of a wider bid to stop the online
copying of protected works.
The Superior Council for Artistic and Literary Intellectual Property
(Conseil Supérieur de la Propriété Littéraire et Artistique, or CSPLA)
advises to create a 3 year period of mandatory retention of traffic data by
ISP's to help track down online copyright violations and counterfeiting.
The legal regime for data retention is set by the law on daily safety (Loi
sur la Sécurité Quotidienne - LSQ) from 15 November 2001, even though the
application decrees have not been adopted yet. In an earlier response to
that law, the French privacy authority CNIL demanded a maximum period of 3
months.
On top of that, in their advice on the implementation of the European
Copyright Directive (2001/29/EC, to be transposed in the law on the digital
economy) the CSPLA wants explicit legal permission to create databases with
the IP-numbers of internet users that share music, films or computer
programs. They call on parliament to 'find a solution to allow collecting
societies and rightholders to create such files with the sole purpose of
protecting their rights.'
That call seems hardly necessary anymore. Even though the CNIL explicitly
rejected the creation of such a database in an advice from March 2001,
recently the CNIL changed its mind. According to an amendment on the new
privacy law drafted by CNIL vice-president and senator Alex Turk, companies
that are victims of copyright infringements have the right to collect
personal data when related to infringements, judgments and safety measures.
Finally, the commission recommends the future of Digital Rights Management
as a system that won't just to be able to check whether files are
authorized for legal exchange online, but also able to identify and block
file exchanges in any server and router on its way.
The draft law on the digital economy, approved last February by the lower
house of Parliament and late June by the Senate, is expected to be passed
by the end of this year.
CSPLA report (26.06.2003, in French)
http://www.culture.gouv.fr/culture/cspla/raplibertesindiv.pdf
Article in e-zine Transfert (04.07.2003, in French)
http://www.transfert.net/a9082
|
RoDI
ISOC
IWA
ARTT
RTS
WQC 2003
ISAQ 2005