Slide 33

Notes:

This section does no more than lift the security stone to reveal what’s underneath. Anyone wishing to manage a secure server should read the relevant FAQs (Frequently Asked Questions) listed in the bibliography.
It’s also worth noting that the servers with the most security holes are not necessarily the most insecure but may simply be the most popular. Apache has posted a whole range of bugs and fixes whereas IBM have stated that their are no known bugs relating to their ICCS Web server. What does this really tell you about the security of each product?
Whatever the risks, monitor the relevant news groups and mailing lists for discussion (you can be sure that the hackers will be) and upgrade as soon as problems are made known. 6 months after NCSA version 1.3 was shown to have serious security problems many sites had still not upgraded (source: www.netcraft.co.uk).