|
A Security hole is a sign of fragility within the design of a software program.
A security hole can be present in an Operating System(OS) (Linux, Macintosh, Windows, etc.) or a software program(Apache HTTP server, PHP, Symantec Internet Security) that runs within an operating system. An example of an operating system security hole: The Blaster worm was a worm that exploited a flaw in the Windows operating system and infected several thousands of computers just by making contact over the Internet. An example of a software security hole: A web server running an older version of PHP could be used by a remote attacker to take control of a system. This system could then be used to host a phishing website or put to other malicious purposes.
In summary, a security hole allows the falsification of data, unauthorized access and potential leakage of personal or corporate information.
When security hole is fixed by a vendor, it is usually available to download for free. See the Advisories and Patches section.
|