Common System Problems

1.

Poor system administration practices

2.

Reusable/poor passwords

3.

Flawed SUID programs (e.g., rdist, binmail)

4.

HTTP server and CGI application vulnerabilities

5.

Default ``+'' entries in the /etc/hosts.equiv file

6.

NFS/NIS vulverabilities

7.

sendmail program bugs

8.

Buffer overruns (e.g., gets(), syslog())

9.

SUID shell scripts