Crackers:
Because SSH lets you login remotely, obviously it has the ability to give a root access quite easilly, if not configured correctly.
Admins:
This is one of the biggest security problems. A lot of people run OpenSSH, however I would strongly advise against it if possible. It is constantly being broken, and a lot of their exploits are root exploits – meaning a crackers gains full access to your server.
What do you use instead? The real commercial SSH server. They have a free version for non-commercial use. SSH Secure Shell for Servers: Non-commercial version
Again, I’m not listing the instructions for installation, they can be found on the site or in the tarball itself (generally as “INSTALL”).
Continue to Keeping your server secure »
In this tutorial:
