
	Home > Security Tips > Web Security Advisor > Protecting your Web server from Nimda

Security Tips:

EMAIL THIS

TIPS & NEWSLETTERS TOPICS

WEB SECURITY ADVISOR

Protecting your Web server from Nimda

Charles Banas
09.20.2001
Rating: -3.75- (out of 5)

Digg This!

StumbleUpon

Del.icio.us

Protecting your Web server from Nimda

This tip was submitted to the searchSecurity Tip Exchange by user Charles Banas. Let other users know how useful it is by rating the tip below.

The Web security tip titled Protecting the Web server is something I wish I had access to (or had realized) before I went to work today.

You see, my company was hit with the new Nimda worm. It uses several IIS exploits, including one that we discovered only too late: TFTP. It uploads its core code as Admin.dll and executes that DLL file from the root directory on the main (C:) drive. If we hadn't had TFTP enabled, (it is by default) we never would have had much of a problem with this worm.

Thank God for the services file in %systemroot/system32/drivers/etc/services! Specifially, the line we changed was: TFTP 69/udp
to: TFTP 0/udp

(Oh, man I hate IIS...)

Rate this Tip
To rate tips, you must be a member of SearchSecurity.com. Register now to start rating these tips. Log in if you are already a member.

BROWSE BY TAG

Web Security Advisor, VIEW ALL TAGS

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	Web Security Advisor
	DNS rebinding defenses still necessary, thanks to Web 2.0
	New defenses for automated SQL injection attacks
	PCI compliance and Web applications: Code review or firewalls?
	Worst practices: Bad security incidents to avoid
	Web scanning and reporting best practices
	Social networking Web site threats manageable with good enterprise policy
	Enterprise security in 2008: Building trust into the application development process
	PCI DSS Section 6: A plan for tackling application security
	Making the case for Web application vulnerability scanners
	Preparing for uniform resource identifier (URI) exploits

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

Research Solutions for Network Security, Access Control and Security Threats

View this month\\'s issue and subscribe today.

Apply online for free conference admission.

SEARCH :

Site Index

TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.


TechTarget Corporate Web Site \| Media Kits \| Site Map All Rights Reserved, Copyright 2003 - 2009, TechTarget \| Read our Privacy Policy