Que tal amigos.
Disculpa por la tardanza en publicar.
Les comento que ya econtre la forma de configurar xampp de una forma segura.
Los puntos vulnerables que tienes al instalar xampp son:
Here a list of missing security in XAMPP:
1.The MySQL administrator (root) has no password.
2.The MySQL daemon is accessible via network.
3.ProFTPD uses the password "lampp" for user "nobody".
4.PhpMyAdmin is accessible via network.
5.Examples are accessible via network.
6.MySQL and Apache running under the same user (nobody).
Para cerrar estos puntos vulnerables necesitas ejecutar:/opt/xampp/xampp securityY despliega el siguiente menu con las opciones configurables:
XAMPP: Quick security check...
XAMPP: Your XAMPP pages are NOT secured by a password.
XAMPP: Do you want to set a password? [yes] yes (1)
XAMPP: Password: ******
XAMPP: Password (again): ******
XAMPP: Password protection active. Please use 'lampp' as user name!
XAMPP: MySQL is accessable via network.
XAMPP: Normaly that's not recommended. Do you want me to turn it off? [yes] yes
XAMPP: Turned off.
XAMPP: Stopping MySQL...
XAMPP: Starting MySQL...
XAMPP: The MySQL/phpMyAdmin user pma has no password set!!!
XAMPP: Do you want to set a password? [yes] yes
XAMPP: Password: ******
XAMPP: Password (again): ******
XAMPP: Setting new MySQL pma password.
XAMPP: Setting phpMyAdmin's pma password to the new one.
XAMPP: MySQL has no root passwort set!!!
XAMPP: Do you want to set a password? [yes] yes
XAMPP: Write the passworde somewhere down to make sure you won't forget it!!!
XAMPP: Password: ******
XAMPP: Password (again): ******
XAMPP: Setting new MySQL root password.
XAMPP: Setting phpMyAdmin's root password to the new one.
XAMPP: The FTP password for user 'nobody' is still set to 'lampp'.
XAMPP: Do you want to change the password? [yes] yes
XAMPP: Password: ******
XAMPP: Password (again): ******
XAMPP: Reload ProFTPD...
XAMPP: Done.
(1) Setting a password will protect the XAMPP demo pages (http://localhost/xampp/) using this password. The user name is 'lampp'!
After calling this command your XAMPP installation should be "secure". For my part I've no idea what else could be insecure. FUENTE
http://www.apachefriends.org/en/faq-xampp-linux.html#sichererSaludos