OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [suse-security] Webmin security

From: Sourian (souriango.ro)
Date: Fri Aug 01 2003 - 08:39:11 CDT


My 2 cents:

Use it over https so all data transmitted is encrypted. Never over http.
You can change the port for it too. It's not as secure as ssh+vi but it
will do.

However I suggest keeping webmin up2date. (in fact, keep the whole system
;-)). Some time ago there was a bad a$$ vulnerability found in it.

Best regards,
Sourian

At 20:09 31.07.2003 -0400, you wrote:
>My install of Webmin installed so that my connection is:
>
>https://computer.domain:10000/
>
>Does this not provide a secure connection?
>
>I realize that it does not limit others from connecting, but perhaps it is
>enough for Joćo.
>
>- Paul
>
>On Thursday 31 July 2003 11:22, Joćo Reis wrote:
> > Hi to all!
> >
> > I am interested in creating a way to administer my company systems when iam
> > away. I come across Webmin and i think it is a good way to administer
> > systems when i am not in the company.
> >
> > Does anyone knows if the Webmin permits to do a administration of the
> > systems securely ?
> >
> > Example if i connect from home to my company to administer my systems with
> > webmin is there any secyrity flaws or if it is not advisable ?
> >
> > Thanks to all and sorry about my english.
> >
> >
> >
> > Joćo Reis
> > -------------------------------------------------------
>
>
>--
>Check the headers for your unsubscription address
>For additional commands, e-mail: suse-security-helpsuse.com
>Security-related bug reports go to securitysuse.de, not here

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here