Server Security Help

[Tipsy]

A quick question:

One of our servers has been used for spamming. We're almost certain it's via an exploit in a script such as an unsecure form etc. We're currently wading through logs to track it down (mod_security isn't stopping it) but in the meantime does anyone know of a decent scanner that will check a server for known vulerabilities like that?

Most I can find are program specific such as something that looks for unsecure phpbb's. Are there any programs that check for a broad range of possible exploits?

[IceMaster]

chkrootkit --> http://www.chkrootkit.org/

[Tipsy]

Thanks but no help. It's thankfully not rootkit related (run both the rootkit checkers) and as I say pretty certainly a script which will eventually be tracked down via the logs (I hope).

It'd be nice to have something to scan for stuff like this though. Given the amount of exploits in the 1000's of script out there you'd have thought someone would have a nice little script that looks for them

[BigBen]

http://www.nessus.org/

[chaze]

chkrootkit --> http://www.chkrootkit.org/

this is the industry standard right now.

[Tipsy]

http://www.nessus.org/

Thanks - shame their latest release doesn't seem to support bsd 4.9 though Only 5+.

I may give it a go anyway and just copy across any missing bsd5 binaries see if I can get it running.