| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> help interviewing
Does anybody have list that contains the most commonly asked questions in=
an
interview or cn they piont me to a website that can help. =
If an interviewr were to ask you .. what are your greatest technical sten=
gths
, are they looking for general technical skills or they are looking dba
related technical skills. =
Thanks in advance
larry
From: "Wilmont Belfry" <AlphaLeader_at_1stconnect.com>
Date: Wed, 10 May 2000 18:42:06 -0400
Subject: ISSalert: Top 10 Vulnerabilities
FYI.... Wilmont C. Belfry
> TOP 10 VULNERABILITIES
>
> The top 10 vulnerabilities represent the most commonly found and exploited
> high-risk vulnerabilities on the Internet. This list is derived from
> various trusted sources including ISS X-Force analysis, customer input,
> ISS Professional Services, and security partners. The top 10 list is
> maintained by ISS X-Force and distributed quarterly with the ISS Alert
> Summary.
>
> Security Advantage
> Securing computers and networks from these vulnerabilities across the
> enterprise assures protection from the most commonly exploited
> vulnerabilities on the Internet. This list should be incorporated into
> security policies to establish a reasonable level of protection.
>
> TOP 10
> 1. Denial of service exploits
> - TFN
> - TFN2k
> - Trin00
> - Stacheldraht
> - FunTime Apocalypse
>
> 2. Weak accounts
> - Default accounts (routers, firewalls)
> - Null passwords for admin/root accounts
> - SNMP with public/private strings set
>
> 3. IIS (Microsoft Internet Information Server)
> - RDS
> - HTR
> - Malformed header
> - PWS File Access
> - CGI Lasso
> - PHP3 metacharacters
> - PHP mlog.html read files
>
> 4. Open databases
> - Oracle default account passwords
> - Oracle setuid root oratclsh
> - SQL Server Xp_sprintf buffer overflow
> - SQL Server Xp_cmdshell extended
>
> 5. E-Business web applications
> - NetscapeGetBo
> - HttpIndexserverPath
> - Frontpage Extensions
> - FrontpagePwdAdministrators
>
> 6. Open Email
> - Sendmail pipe attack
> - SendmailMIMEbo
>
> 7. FileSharing
> - NetBIOS
> - NFS
>
> 8. RPC
> - rpc.cmsd
> - rpc-statd
> - Sadmin
> - Amd
> - Mountd
>
Received on Wed May 10 2000 - 16:39:35 CDT
 |
 |