tadalafil6mg onde comprar 60 comprimidos cialis and horney goat weed doxepin hcl 50 mg side effects actresses cialis commercial is 150 metoprolol furosemide price philippines bociansafaris.com jarsofclaychurchinc.org levofloxacin hemihydrate obat zithromax online australia yalovadaarsa.com promiseclgi.org cipro 1000 mg dosage buy tetracycline canada buy generic viagra online india generic levitra safety norvasc 5 mg 30 tablet uses of prednisone tablets can i cut levitra pill horseblog.com locksmithfairfax.us ivermectin kupilam lamisil tablets and nuva ring uso veterinario de levofloxacina citalopram 10mg cost walmart insideinsights.net NEOHAIRINDO.COM can i buy naproxen over the counter uk azithromycin mayo clinic how much amitriptyline to get high prnc.tv cytotec in kenya side effects valtrex medication cialis price in pakistani rupees viagra masterbating salep gel feldene montelukast cost at target kamagra jelly 5mg ansbach-direkt.de iranstrick-tiregroup.com will the veterans administration propecia wellbutrin 450 xl side effects accidental two doses of singulair bactrim uk pharmacy sekerpinarosgb.com batterymedix.com if having ovary pain during period should i take clomid coenzymeq10 and lisinopril flagyl and cola drink bukitpinus.com torsemide 20 mg pill identification zofran pvp order azithromycin 1g online no prescription doxazosin side effects bradycardia can i reduce the prometrium dose after 9 week pregnancy uses for ciprofloxacin 500 mg tablets for bronchitis in amoxicillin clavulanate potassium and beer prozac 60 mg side effects metformin drug classification bupropion 300mg xl recall avmdtogo.org voltaren gel used anus which is a stronger medication baclofen or oxycodone can you get high from lisinopril cheap viagra online los angeles plavix generic to buy problems with slo niacin with atorvastatin 40 mg indo metformin 500g can it be taken to fall pregnant doxepin online no prescription complications from lasix mri hawthorn propranolol drugprevent.org.uk bactrim 400 mg and drinking alcohol mhc-s.com naproxen 550 mg side effects kamagra kaufen per paysafecard bmmpm.com apo sertraline premature ejaculation association-secours-sante.cm buy kamagra gel theitrecruiters.com xxxmade.com phenergan compatibility inbox-victory.com albuterol puff dosage tetracycline hcl powder for dogs glimepiride cost without insurance bupropion sustained release vs. extended release xiyue028.com injection lasix and dytor uses. ansbach-direkt.de amoxicillin dosage for 3 yr old bociansafaris.com dfldctl.com interactions with coversyl and fluconazole can men with performance anxiety use cialis or viagra patogh98.ir aster-m.com can you take a meloxicam if you have take excedrin clozaril is uses for diarrhea what if i feel no difference on strattera dog ate prometrium side effect sheet for rizatriptan tenormin 50 mg tabletas ic lisinopril 30 mg mobic 7.5 mg compresse khasiat amiodarone hcl 200 mg hpaulsantmire.com thuoc coumadin side propranolol sar sciatica prednisone taper erythromycin tablets 500mg box price in pak cdfeorellana.com nizoral shampoo causes hair loss men keflex capsules side effects highest dosage of accutane elavil alternate uses online pharmacy amoxil yahoo answers stromectol 6mg impetigo metronidazole what happens when you snort gabapentin can you get high off allegra 180 mg can i use nizoral 1 percent on face famvir side effects125mg generic versions of lisinopril ocanz.org generic levitra bayer how much can you sell strattera for on the street levitra viagra price tamsulosin hcl 0 4mg espanol yahoo lamisil at es buena para la candida en el pene cflailesi.org focva.org buy quetiapine canada celecoxib 50 mg can you take mucinex while taking buspar emberdomme.com misoprostol no bleeding segtucson.com lipitor 10mg price in uae strattera mg compared to adderall genesis finasteride usp hair rosemontgroupfoundation.org diovan 40 mg coupon is it safe to inject the yellow 300 mg gabapentin seroquel xr 150 mg depression tadalafil suppliers malaysia ciproxin antibiotic urdu pakistan doxycycline side effects after abortion in kolkata where we got viagra avmdtogo.org fluconazole 150mg dose safe can i snort buspirone fungsi levofloxacin 500 mg 100mg clomid adult septra dosage flagyl dose when used to treat post abortal infection. dinkim.com side effects of ivermectin for demodex purchase viagra 100mg bimar.it lifesaverpoolfencesofnevada.com jarsofclaychurchinc.org nolvadex powder dosage propecia testimonials pazarlamacadisi.com value of cialis in kenya shillings redcaymanmedia.com how do i beat nausea when taking amoxicillin trihydrate feswmp.com africanamericanimages.us ic acyclovir before laser amoxicillin trihydrate can you buy it over the counter ampicillin powder price can you take 8mg of cyproheptadine bociansafaris.com valent 40 valsartan olanzapine teva virkning ezberbozan.net aabbportoalegre.com.br fluconazole over the counter tablet prednisone contiene codeina intermundocomunicacion.com how much is ciprofloxacin mercury drugs philippines bisenconsulting.com mspnor.com will 100 mg seroquel knock you out 8nxw.com albuterol for nebulizer buy online viagra purchase prescription viagra low prices felodipine mr 2.5 paxil neck tremors buy ketoconazole shampoo uk buy online malaysia dapoxetine hydrochloride tablet afbouwen paroxetine 20 mg taking metformin and chf teclav.com.br directmobility.co.uk ketoconazole at safeway amoxicillin 500mg dosage for dental abscess onset of action for lotensin diflucan three day dose metronidazole 500mg antibiotic and pregnancy cytotec dosis se puede tomar dando lactancia terbinafine cat cream does topamax and hydrocodone make you high warfarin cyp2c9 drugprevent.org.uk biolab.com.sg bukitpinus.com consiglio viagra online skale.it avmdtogo.org estrace 1 mg daily sampiyonhaliyikama.com isotretinoin 3 monate shall.i take.propranolol.morning.or.night can i take 1000 mg of naproxen zyban 60 st??ck onlyhantang.com emberdomme.com biolab.com.sg does boots chemist sell fluconazole capsuls uk metformin and diarrhea remedies benazepril 60 mg took cialis before 72 hour augmentin costo mexico cialis generic professional bupropion side effects stomach cardizem 60 mg bula what mg of cipro to take for uti segtucson.com salep ketoconazole buat kucing cflailesi.org lisinopril 12.5 maximum dose tadalafil 40 mg daily how long 2g metronidazole takes to work metronidazole tablets i.p 400mg taken for what deasis gelernt.net is 6 days of antibiotics enough uti anyone has success with 5mg celexa jinguxuexiao.com medrol vs prednisone side effects prednisone 10 mg 6 day taper augmentin tablets cracked singulair brand canada voltaren emulgel extra strength bukitpinus.com oral candidiasis metronidazole lamisil cream for fingernail fungus zoloft fuzzy brain does neurontin show up in a probation drug test errowid conversion of iv lasix to po finasteride manufacturers in europe cflailesi.org cipla azithromycin in cold what is the strongest milligram of cialis azithromycin 500 mg risks of buying viagra online does lisinopril affect birth control pills cipro intestinal side effects amoxicillin cost canada ethinyl estradiol 35 lamisil antifungal cream to kill scabies gambe-leonardo.eu chatcufete.com fluconazole 2 doses orlistat online india zestril price in pakistan segtucson.com how much is zithromax at cvs strattera 3229 40 mg zyvox 600mg ampolla precio buy ciprofloxacin 500mg methocarbamol dosage for back pain segtucson.com veterinary dosage chart gabapentin for dog propranolol slow release for migraines zyprexa class action canada tamoxifen ready for bed at nine pm order zithromax online usa buy fluoxetine online uk online chemist for viagra shof3qar.com prednisone and progesterone nih metronidazole 75 gel and alcohol chatcufete.com prozac 60 mg a day augmentin 6tablets price in medical stores pakistan amoxicillin elevated liver enzymes lamisil antifungal for pityriasis rosea diltiazem 4 gel how to use misoprostol 4weeks into pregnancy where to buy amoxicillin for dogs over the counter usa zynaps.com mutien.be generic azithromycin tablets balitoursclub.com side effects 80 mg prednisone generic tamsulosin manufacturers sertraline hcl 25 mg for anxiety elusionist.com kesan sampingan nolvadex kepada bodybuilder mirtazapine too stimulating acyclovir for eye infections piroxicam for cats cost how much does zithromax cost with insurance alcohol flagyl stlsoccer.net does lisinopril lower libido chen-liu.com cymbalta 120 mg per day for pain naproxene 250 mg prix THUMBUY.COM redcaymanmedia.com fotografie-cursus.net kmmvin.eu cheapest line viagra erythromycin can it treat trich inderal tab price pk viagra india bangalore cost levaquin 750 mg walmart indomethacin 1mg maxalt lingua 5 mg preis antibiotik zithromax indonesia zofran odt tablete uputstvo does prednisone work on torn meniscus what is success rate for biobaclofen tablets purchase evista long term use of lisinopril 10 mg buscomi.com biolab.com.sg antibiotic for dogs no prescription uk dinkim.com augmentin for sinus infection viagra fucked woman paxil 10 mg and dopamine can long term of hydrochlorothiazide cause leg cramps nortriptyline 50 mg side effects levitra super force reviews jpsager.com prednisone side effects stretch marks pamelor 25 mg bula is naproxen a muscle relaxant nrstyles.com mylan generic wellbutrin reviews cheap celexa how much is cipro in dubai how much prednisone should i take for poison ivy fosamax plus costo lexapro saved my life dose of ketoconazole in candidiasis in fowl 8nxw.com pdf of sildenafil 20,50 or 100 prednisone 70 mg taper propecia side effects transgender amitriptyline and gaba livocetrizine hydrochloride and montelukast sodium 4 mg buy viagra northampton xn--b1afpdqbb8d.xn--p1ai purchase glucophage secretlives.me liquid anastrozole forum focva.org cardizem cause uti struktur kimia clopidogrel amitriptyline 5 mg capsules for cats side affects etc name cheap viagra singulair 5mg chewable tablets for allergies femara cost walmart what is biotech ciprofloxacin how to purchase viagra tablets cgstudionyc.com amoxicillin 500 mg qid dental script zutam tamoxifen flagyl antibiotic periodontal abscess atenolol and verapamil side effects does seroquel make your pupils small loylogic.com azithromycin 250 mg safe during pregnancy dosage of doxycycline hyclate for cats structure of escitalopram california-employment-lawyers.com konutturk.net fluconazole cream brand name in india escitalopram oxalate and clonazepam can increase height gelernt.net 300mg of zoloft side effects como suspender el bupropion cheapest orlistat in india plavix 75mg info does premarin cause more hair loss than estrace cipro drug side effects what are aspen fluconazole tablets for MDMworkingDogs.com dexamethasone horse injection in france feifan8.net generic viagra no prescription uk hydroxyzine para q es pediatrico coupons for ciprodex otic suspension bedtime gabapentin for dogs fish supplys tenormin cialis online canada paypal rizatriptan benzoate 10 get you high buy clomid cheap uk aml.ca does celexa change your urine color golfnewmexico.com how fast should cipro work on uti sildenafil citrate 100mg buy online o e que cytotec eastriverpartners.info can i give calpol and amoxicillin together eastriverpartners.info NEOHAIRINDO.COM augmentin vs selles noires accutane 3 times a day ovulos cytotec doxycycline pigeons uk liquid bociansafaris.com clomid 34.00 obline can a flagyl pill terminate 4months pregnancy biolab.com.sg blackisbusiness.info tab augmentin duo 1 gm for cirrhosis recommended dose of cytotec for a 16 week abortion can you use ampicillin and flagyl for treatment at once tamsulosin dose unlabeled can zofran4mg be taken for stomach flu mercury drug zykast montelukast pricelist muslim-academy.com ezberbozan.net md.gradgroup.com unitedhealthcare oxford cover cialis hydrochlorothiazide 37.5 depakote and zyprexa damage sertraline 50mg with wllbutrin can thyroxine tablets trigger bipolar how fat will valtrex help a cold sore levocetirizine montelukast syrup dose where to get viagra in dublin voltaren resinat kapseln 150 mg cipro 500mg tab pakistani can u get high off 80mg of baclofen propecia makes you young smallprint.netzoo.net side effects of femara 2.5 mg can i take misoprostol without mifepristone micardis 80 prezzo em2nt.net bactrim what will cause in breastfed cipro and tinidazole for treating candidiasis can misoprostol be take without food clomiphene citrate for sale uk can flagyl ne used to treat bronchitis levitra vs viagra vs cialis reviews singulair 3 year old can you get high from buspirone singulair 4mg es para aumentar defensas o para que q2melbourne.com harga obat cialis 5 mg levothyroxine 25 mcg reviews can doxycycline cause anxiety do you feel lexapro right away patogh98.ir insurance cover cialis focva.org can amoxicillin 825 mg treat a uti 60 mg of prednisone 60 for 7. 40. for 7 20 for 7 flomax 4mg 30 tablets price cflailesi.org anafranil quanto costa antibiotic vial for dogs ears can nexium be taken prn can taking cipro with smz bactrim cause a missed period manfaat obat tamoxifen citrate film levaquin generic name buscomi.com renrenshaw.com generic lexapro antidepressant medication can you take voltaren with felodipine 5mg how and when to take provera 5 for menstrul problems can you take estradiol without progesterone ebay doxycycline terbinafine pills online onlyhantang.com baclofen pi can propranolol cause leg cramps chulavista-suites.com buy isotretinoin gel online antibiotics trim 200 mg for dogs skin infection diltiazem 2 ointment brand names jagdfalkenhof.de side effects of nexium vs prilosec prednisone side effects with chemo us product information otc singulair cipro dose for prostatitis salonedisuccesso.it buy viagra in london england

__________________________________________________________

The following a set of "Best Practices" for an Internet Webserver, based on my
own experience and advisory J-042 from the U.S. Department of Energy
Computer Incident Advisory Capability (CIAC)

__________________________________________________________

PROBLEM: Public web servers continue to be attractive targets for hackers seeking to embarrass organizations or promote a political agenda. Good security practices can protect your site from the risks such compromises create.
PLATFORM: Any UNIX platform or NT system being used as a web server.
DAMAGE: Damage can be anything from a denial-of-service attack, the placement of pornographic material, the posting of political messages, or the deletion of files or the placement of malicious software.

SOLUTION: Follow known best practices and apply software patches as soon as they are announced by your incident response team or your vendor.


BEST PRACTICES IN MANAGING WORLD WIDE WEB SERVER SECURITY:

  1. Network filtering:
  2. Host based security:
  3. Configuring the Web service/application:
  4. Auditing/logging:
    • Log all user activity and maintain those logs either in an encrypted form on the web server or store them on a separate machine on your Intranet, or write to "write-once" media.
    • Monitor system logs regularly for any suspicious activity.
    • Install some trap macros to watch for attacks on the server (such as the PHF attack).
    • Create macros that run every hour or so that would check the integrity of passwd and other critical files.
    • When the macros detect a change, they should send an e-mail to the system manager, write a message to logs, set off a pager, etc..
  5. Content management:
  6. Intrusion Detection:

BULLETINS PUBLISHED RELATING TO WEB SERVERS:

UNIX Systems

F-11: Unix NCSA httpd Vulnerability http://www.ciac.org/ciac/bulletins/f-11.shtml
H-01: Vulnerabilities in bash http://www.ciac.org/ciac/bulletins/h-01.shtml
I-024: CGI Security Hole in EWS1.1 Vulnerability  http://www.ciac.org/ciac/bulletins/i-024.shtml
I-082: HP-UX Netscape Servers Vulnerability http://www.ciac.org/ciac/bulletins/i-082.shtml
I-040: SGI Netscape Navigator Vulnerabilities http://www.ciac.org/ciac/bulletins/i-040.shtml

Domino 4.6 may allow unauthorized writes to remote server drives and server configuration files. http://www.l0pht.com/advisories/domino2.txt

Excite 1.1 may set encrypted password files world writable. BUGTRAQ Mail Archives: "Security bugs in Excite for Web Servers 1.1" at http://www.netspace.org/cgi-bin/wa?A2=ind9811e&L=bugtraq&F=&S=&P=519

ColdFusion Application Server and unauthorized access to web server data. http://www.excite.com/computers_and_internet/tech_news/zdnet/?article=/news/19990429/1014542.inp

Windows Systems

I-024: CGI Security Hole in EWS1.1 Vulnerability http://www.ciac.org/ciac/bulletins/i-024.shtml
I-025A: Windows NT based Web Servers File Access Vulnerability http://www.ciac.org/ciac/bulletins/i-025a.shtml

Microsoft bulletins can be found under the Microsoft Security Advisor web page at http://www.microsoft.com/security/default.asp The following bulletins appeared in "Current Security Bulletins" and "Security Bulletin Archives":
MS99-013: Solution Available for File Viewers Vulnerability. (May 7, 1999)
MS99-012: MSHTML Update Available for Internet Explorer. (April 21, 1999)
MS99-011: Patch Available for "DHTML Edit" Vulnerability. (April 21, 1999)
MS98-019: Patch Available for IIS "GET" Vulnerability. (December 21, 1998)
MS98-016: Update available for "Dotless IP Address" Issue in Microsoft Internet Explorer 4. (October 23, 1998)
MS98-011: Update Available for "Window.External" JScript Vulnerability in Microsoft Internet Explorer 4.0. (August 17, 1998)
MS98-004: Unauthorized ODBC Data Access with Remote Data Services and Inernet Information Systems. (July 15, 1998)

"ISAPI Extension vulnerability allows to execute code as SYSTEM" at: http://www.ntbugtraq.com/page_archives_wa.asp?A2=ind9903&L= ntbugtraq&F=P&S=&P=2439

Internet Explorer 5.0 cached passwords can be reused by another user. http://www.zdnet.com/zdnn/stories/news/0,4586,1014586,00.html http://www.zdnet.com/anchordesk/story/story_3351.html

Internet Explorer (3.01, 3.02, 4.0, 4.01) may allow frame spoofing to trick the user Microsoft Knowledgebase Article ID: Q167614: "Update Available For "Frame Spoof" Security Issue" http://support.microsoft.com/support/kb/articles/q167/6/14.asp

Systems running NCSA HTTPD and Apache HTTPD

G-17: Vulnerabilities in Sample HTTPD CGIs http://ciac.llnl.gov/ciac/bulletins/g-17.shtml
G-20: Vulnerability in NCSA and Apache httpd Servers http://www.ciac.org/ciac/bulletins/g-20.shtml

Apache denial-of-service attack -- Apache httpd (1.2.x, 1.3b3) http://www.netspace.org/cgi-bin/wa?A1=ind9712e&L=bugtraq#2 http://www.apache.org/dist/patches/apply_to_1.2.4/

no2slash-loop-fix.patch http://www.apache.org/dist/patches/apply_to_1.3b3/
no2slash-loop-fix.patch "HTTP REQUEST_METHOD flaw" http://www.netspace.org/cgi-bin/wa?A2=ind9901a&L=bugtraq&F=&S=&P=8530

Systems running Netscape Navigator

H-76: Netscape Navigator Security Vulnerability http://www.ciac.org/ciac/bulletins/h-76.shtml
I-082: HP-UX Netscape Servers Vulnerability http://www.ciac.org/ciac/bulletins/i-082.shtml
I-040: SGI Netscape Navigator Vulnerabilities http://www.ciac.org/ciac/bulletins/i-040.shtml

"Reading local files with Netscape Communicator 4.5" at http://www.geocities.com/ResearchTriangle/1711/b6.html

Netscape Navigator may allow frame spoofing to trick the user Netscape Security Update: "The Frame-Spoofing Vulnerability" http://home.netscape.com/products/security/resources/bugs/framespoofing.html

System running cgi-bin routines

I-013: Count.cgi Buffer Overrun Vulnerability  http://www.ciac.org/ciac/bulletins/i-013.shtml
I-014: Vulnerability in GlimpseHTTP and WebGlimpse cgi-bin Packages   http://www.ciac.org/ciac/bulletins/i-014.shtml

IRIX webdist.cgi, handler and wrap programs ftp://sgigate.sgi.com/security/19970501-02-PX ftp://info.cert.org/pub/cert_advisories/CA-97.12.webdist

"Nlog 1.1b released - security holes fixed" http://www.netspace.org/cgi-bin/wa?A2=ind9812d&L=bugtraq&F=&S=&P=10302 http://owned.comotion.org/~spinux/index.html

Other useful documents

IF YOUR WEB SITE HAS BEEN HACKED

CIAC recommends the following as you check your web servers:

1. Apply ALL security-related patches for the web server software as well as for the underlying Operating System.
2. Remove ALL unnecessary files such as phf from the scripts directory /cgi-bin. Remove the "default" document trees that are shipped with Web servers such as IIS and ExAir.
3. Validate ALL user accounts on the web server and ensure that they have strong passwords.
4. Validate ALL services and open ports on the web server to ensure there are no Trojanned services.
5. Look for suspicious files in the /dev, /etc, and /tmp directories.
______________________________________________________________________________

CIAC, the Computer Incident Advisory Capability, is the computer security incident response team for the U.S. Department of Energy (DOE) and the emergency backup response team for the National Institutes of Health (NIH). CIAC is located at the Lawrence Livermore National Laboratory in Livermore, California. CIAC is also a founding member of FIRST, the Forum of Incident Response and Security Teams, a global organization established to foster cooperation and coordination among computer security teams worldwide.

Previous CIAC notices, anti-virus software, and other information are  available from the CIAC Computer Security Archive. World Wide Web: http://www.ciac.org/ (or http://ciac.llnl.gov) Anonymous FTP: ftp.ciac.org (or ciac.llnl.gov) Modem access: +1 (925) 423-4753 (28.8K baud) +1 (925) 423-3331 (28.8K baud) 


Other references

Microsoft IIS 5.0:  "Secure Internet Information Services 5 Checklist" includes a few tweaks to the underlying Windows 2000 OS. www.ntsecurity.net/go/2c.asp?f=/news.asp?IDF=178&TB=news