Welcome to Data Centre Management magazine
Data Centre Management (ISSN 1753-9897) is the magazine and website for data centres and server rooms.
Register today for your free subscription and you'll be joining some of the most influential IT leaders in the UK who have already signed up for regular print copies.
Data Centre Management's new RSS Feeds also deliver the latest news to your desktop. More feeds will be coming over the coming weeks.
| Open source vulnerability under the microscope |
| 24 Jan 2008 | |||
|
Palamida has expanded its Vulnerability Reporting Solution detection capabilities to include 431 open source security alerts - 148 of which are considered to have High-Severity Common Vulnerability and Exposures (CVEs) ranging from cross-site scripting and buffer overflows, to SQL injections.
In addition, the company has also published the Top 5 Most Overlooked Open Source Security Vulnerabilities found in enterprise audits during 2007 - derived from an analysis of over 300 million lines of code across multiple verticals that include financial services, technology and government. The top vulnerabilities can be found here . “Open source is inherently no more risky than commercial software,” said Mark Tolliver, CEO of Palamida. “The majority of open source projects provide a patched version to any issue within hours of discovery. Users of open source, however, need a way to quickly and accurately verify what components they are using and associate them with known vulnerabilities so they can retrieve updated versions. Without a mechanism in place to perform this function, organisations put themselves at risk for introducing security vulnerabilities into their code base.”
|