The FBI has teamed up with the SANS Institute to draw up a list of the worst 20 security vulnerabilities bedevilling Windows and *Nix systems.

The list now on its third year serves as a general resource most specifically aimed at less experienced admins. It highlights the top 10 Windows and top 10 Unix issues in their relative order of importance.

Top Vulnerabilities to Windows Systems

1. Internet Information Services (IIS)

2. Microsoft Data Access Components (MDAC) - Remote Data Services

3. Microsoft SQL Server

4. NETBIOS - unprotected Windows Networking Shares

5. Anonymous Logon - Null Sessions

6. LAN Manager Authentication - weak LM hashing

7. General Windows Authentication - accounts with no passwords or weak passwords

8. Internet Explorer

9. Remote Registry Access

10. Windows Scripting Host

Top Vulnerabilities to Unix Systems

1. Remote Procedure Calls (RPC)

2. Apache Web Server

3. Secure Shell (SSH)

4. Simple Network Management Protocol (SNMP)

5. File Transfer Protocol (FTP)

6. R-Services - trust relationships

7. Line Printer Daemon (LPD)

8. Sendmail

9. BIND/DNS

10. General Unix Authentication - accounts with no passwords or weak passwords

As with previous years the list is fairly generic but then again most security problems originate from well- established problems. Keeping on top of the listed flaws can only help the cause of security on the Net. After all crackers tend to exploit the path of least resistance.