The Twenty Most Critical Internet Security Vulnerabilities (Updated)

The Twenty Most Critical Internet Security Vulnerabilities (Updated)

IT security and research organization The SANS Institute is releasing its annual Top 20 list of Internet security vulnerabilities this week, with the intention of offering organizations at least a starting point for addressing critical issues.

Top Vulnerabilities to Windows Systems

W1 Web Servers & Services
W2 Workstation Service
W3 Windows Remote Access Services
W4 Microsoft SQL Server (MSSQL)
W5 Windows Authentication
W6 Web Browsers
W7 File-Sharing Applications
W8 LSAS Exposures
W9 Mail Client
W10 Instant Messaging

Top Vulnerabilities to UNIX Systems
U1 BIND Domain Name System
U2 Web Server
U3 Authentication
U4 Version Control Systems
U5 Mail Transport Service
U6 Simple Network Management Protocol (SNMP)
U7 Open Secure Sockets Layer (SSL)
U8 Misconfiguration of Enterprise Services NIS/NFS
U9 Databases
U10 Kernel
http://www.sans.org/top20/

http://www.pcworld.com/news/article/0,aid,118109,00.asp