 |
|
 |
|
Best Tips
Security Scanner
Security Categories
Advertise With Us!
Latest Viruses / Threats
2008/8/28 15:43:04
2008/8/28 14:00:23
2008/8/28 14:00:23
2008/8/28 14:00:23
2008/8/28 13:43:06
Downloads
Security News
RSS / Atom Feeds
|
W4.5 How to Protect against the Windows Services Vulnerabilities
- Keep the systems updated with all the latest patches and service packs. If possible enable Automatic Updates on all systems.
- Use Intrusion Prevention/Detection Systems to prevent/detect attacks exploiting these vulnerabilities.
- In some cases, exposure to the vulnerability could be removed by disabling the corresponding service. For example, Windows Routing and Remote Access service could be disabled in most environments using Windows 2000. To do so, start the service manager interface. Locate the required service and right click it. Invoke the properties option in the popup menu. The "Startup Type" of the service can be modified to disable the respective service.
- In some cases, null session access to the vulnerable interface could be removed as a work-around. It is a good practice to review your current RestrictAnonymous settings and keep it as stringent as possible based on your environment. read more...
- Many of these vulnerabilities are found on interfaces offered through CIFS, and blocking ports 139/tcp and 445/tcp at the perimeter is essential for preventing remote attacks. It is also a good practice to block inbound RPC requests from the Internet to ports above 1024 to block attacks to other RPC based vulnerabilities using firewalls.
- XP SP2 and Windows 2003 SP1 and R2 come with several security enhancements, including the Windows firewall and Security Configuration Wizard (Windows 2003 SP1 and R2 only). It is highly advisable to upgrade to these service packs, enable the Windows firewall and reduce attack surface with Security Configuration Wizard.
W4.6 References Threats and Countermeasures: Security Settings in Windows Server 2003 and Windows XP
Windows XP Security Guide
Windows Server 2003 Security Guide Using Windows Firewall
Security Configuration Wizard for Windows Server 2003 How to use IPSec IP filter lists in Windows 2000 How to block specific network protocols and ports by using IPSec
How to configure TCP/IP filtering in Windows 2000
|
|
|
|
| |
|
