Ubuntu Security :: Vino Is NOT SECURE - "Your Desktop Is Only Reachable Over The Local Network." Should Be Removed
May 28, 2011
I installed a fresh copy of Ubuntu 11.04 on my server about 2 weeks ago, I setup remote desktop and figured to just leave the password field out as it suppose to be pre-configured to only accept local connections, well, apparently not. I was noticing some strange network activity and checked my router connections and sure enough I see port 5900 to the server, open vino icon and see that there is someone else connected! (IP of unauthorized user: 77.29.51.239 ).. Immediately kick them and set a password. This should really be addressed and/or a password should be defaulted or at the very least the "Your desktop is only reachable over the local network." should be removed.
Running Ubuntu 9.10. In the Remote Desktop config dialog I get: "Your desktop is only reachable over the local network. Others can access your computer using the address 127.0.0.1 or tabatha.local." I understand this means only the loopback ip address is available. All my other machines show their true local ip address (e.g., 192.168.1.104) in this dialog. Thus I cannot log on to this desktop from other machines.
When I try to do a remote logon from another Ubuntu 9.10 box (or from an XP box using a VNC viewer), I get: "Connection to 192.168.1.102 has been closed." What steps are needed to make this machine show its actual ip address? All file sharing between the various machines is working properly and all windows shares back and forth between XP and 'nix, and among the the vaious XP boxes and linux boxes are available as designed.
how secure a default install of Xubuntu desktop 10.04 is when connected to the internet with a routable, public ip address. If anyone can give some recommendations on any changes/additions they would make to improve security
I would like to setup a remote desktop for my Ubuntu computer so I can use my computer on a Windows computer that is on a different network. How can I do this?
I'm an Oracle DBA and started working for my current employer about 4 months ago. This past weekend an alert re: FS space brought my attention to /var/spool/clientmqueue (full of mail re: cron jobs) and the fact that sendmail is not running on our Linux servers.I'm told that the IT security team deemed sendmail too vulnerable so we don't run it.Aside from FS filling up and missing notification of issues with crontab entries, I'm concerned that we may be missing notification of potential issues. In other Unix/Linux environments I've seen emails from the print daemon when it experienced problems with specific jobs.
Are there other Linux facilities aside from cron and lpd that use email to advise the users of possible issues? Are there ways to secure sendmail or secure alternatives to sendmail? My primary need/desire is to make sure that emails regarding issues on the server get to the appropriate users. Secondary goal would be to have the ability to use mailx to send mail out. There is No need/desire to receive mail from outside.
I am working on Redhat Linux. While connecting internet through modem.Modem is configured. After activate both modem(ppp0) and eth0. When i restart my network service it is showing RTNETLINK :network isn't reachable...
I'm trying to use Gnome's built in remote desktop viewer, Vino, to remote to my PC. When I use the vnc client on another computer to get to my OpenSuse 11.1 box, it lets me type in a password and pauses. If I look at the screen on my OpenSuse box it is waiting for the gnome keyring password and it wanting it for vino-preferences. It specifically says: The application gnome remote desktop (/usr/bin/vino-preferences) wants access to the default keyring but it is locked.
Does anybody know how to bypass needing the password for this? I'm not sure how to begin to figure this out. I've been a longtime Fedora user and vino worked fine there so I don't think this is the way it is supposed to work.
I'm trying to use Gnome's built in remote desktop viewer, Vino, to remote to my PC. When I use the vnc client on another computer to get to my OpenSuse 11.1 box, it lets me type in a password and pauses. If I look at the screen on my OpenSuse box it is waiting for the gnome keyring password and it wanting it for vino-preferences. It specifically says: The application gnome remote desktop (/usr/bin/vino-preferences) wants access to the default keyring but it is locked. Does anybody know how to bypass needing the password for this? I'm not sure how to begin to figure this out. I've been a longtime Fedora user and vino worked fine there so I don't think this is the way it is supposed to work.
my OS is SuSE 11.2 with gnome.Remote administration is active.The VNC-session then connects to the login-screen and after login opens a new desktop.How can vino be configured to attach to the desktop that is already running. (Ubuntu does that per default so it should be possible with SuSE too)
my OS is SuSE 11.2 with gnome. Remote administration is active. The VNC-session then connects to the login-screen and after login opens a new desktop. How can vino be configured to attach to the desktop that is already running. (Ubuntu does that per default so it should be possible with SuSE too)
i don't understand what I am doing wrong. I started a CentOS Vm through Vmware server 1.05 When I run the machine I preform Dhclient and my machine gets an IP internet works fine.
When I change my IP to static everything stops working I cant ping anything anymore I cant ping my server I cant ping my gateway I cant ping google My config is done through Webmin but I know it can also be done through /etc/sysconfig/network-scripts/ifcfg-eth0 My hosts file has this
127.0.0.1 localhost srvspam my /etc/sysconfig/network-scripts/ifcfg-eth0 file has this BOOTPROTO=none NAME="" MACADDR="" HWADDR=00:0C:29:59:91:DE
I was having a discussion with someone who said that telnet, FTP, HTTP plain-text authentication in the local subnet is ok because it's a switched network. Also, that these protocols are not good over the net but in a local subnet they are just fine.
I know that someone can plug a hub in the network port and connect 2 (or more) PCs and see the packets. Also, heard about ettercap but haven't really delved into it. I know dsniff was written to prove the point that unencrypted protocols are bad. Would like to get opinion about unencrypted protocols over a switched networks.
Kernel: Linux 2.6.26-2-686 (i686) Compiled: #1 SMP Thu Nov 25 01:53:57 UTC 2010 C Library: GNU C Library version 2.7 (stable) Distribution: Debian GNU/Linux 5.0.8 Desktop Environment: GNOME 2.20
Gnome comes with Vino Remote Desktop as part of it's package. I want Vino to run at boot so that I can login remotely.I am using VNC-4.1.3 for remote viewing. However, I can only view remotely once I have logged-in locally
I'm trying to setup a NFS4 server (no security, local home network behind FW). It seems that I'm missing something because 'rpcinfo -p' does not list v4 for NFS: petit-pois:/home/eric# rpcinfo -p
Kernel: Linux 2.6.26-2-686 (i686) Compiled: #1 SMP Thu Nov 25 01:53:57 UTC 2010 C Library: GNU C Library version 2.7 (stable) Distribution: Debian GNU/Linux 5.0.8 Desktop Environment: GNOME 2.20
Gnome comes with Vino Remote Desktop as part of it's package. I want Vino to run at boot so that I can login remotely. I am using VNC-4.1.3 for remote viewing. However, I can only view remotely once I have logged-in locally.
I seem to be missing a secure.log or security.log file. I have Ubuntu 10.04 and can't find this file. I looked in the /var/log and ran a search command to no avail. Does anyone know where this file is or is it called something else. I'm looking for a file that logs any change to the security settings of the system.
I'd like a way to see all of the devices on my local network and what their local IP address is. I recall that I used wireshark to troubleshoot a similar problem a while back, but it doesn't seem to have a way to see all of the devices- only the traffic. (I'd like to do this without having to physically interface with my router if possible, and I am in an encrypted network if that matters)
I have installed a web server on my local network. Everything is well configured and web pages are shown correctly from Internet (outside the local network) using the domain or the public IP.The issue is if I try to see that web pages (using the domain or the public IP) from inside the local network. In that case the router config page (192.168.1.1) is shown instead of the web pages.From inside the local network I'm only able to see the web pages using the internal IP address (192.168.1.XX).
I've accidentally removed the taskbar from my KDE desktop. Minimized programs are only accessible through a widget called Window List. I would like to have my KDE desktop back to its default view.
I set up my ubuntu server with iptables that only allows ssh in the input chain (and of course established connections) with only the mac adress of my laptop allowed to connect, set up a key with a long passphrase and installed pam_abl plugin. ICMP echo is blocked by default.
The only problem is i log all other attempts to connect to the server and i see a lot of traffic going to ports 445 and 5900.
My question is: Is there a possibility that these attempts could succeed and is there any way to further ensure this server?
Newbie here, I'm thinking of moving mostly to linux to get away from the security holes in Windows. And I have some questions...
How secure is Firefox for doing online banking?
Sometimes I have run into a situation where the bank doesn't support anything but Windows explorer when accessing my accounts. Can this be gotten around safely in Linux?
Is there any way to secure harddisk accessbility ? i want encrypt my hard disk, and partitions that ubuntu installed on that. is there a way ? i want deny all access to hard disk, just my own root account can have access to all.
Ok im new, i know apparmor is running. i was looking for firestarter but their isnt one.....how do i secure this server? i want a good firewall and some virus protection!. also do i need this?
