Security Overview (continued) The SANS (SysAdmin, Audit, Network, Security) Institute Top Ten Vulnerabilities to UNIX Systems 1) BIND Domain Name System (DNS) 2) Remote Procedure Calls (RPC) 3) Apache Web Server (HTTP, HTTPS) 4) General Unix Accounts with No Passwords or Weak Passwords 5) Clear Text Services (r commands, telnet, ftp, etc...) 6) Sendmail (SMTP) 7) Simple Network Management Protocol (SNMP) 8) Secure Shell (SSH) 9) NIS/NFS 10) Open Secure Sockets Layer (SSL)