Win termin services alert

From: Ron Rogers <RROGERS_at_galottery.org>
Date: Fri, 31 Oct 2003 06:05:19 -0800
Message-ID: <F001.005D531F.20031031060519@fatcity.com>

List.
Reguarding Windows Terminal services...
It is used to remotely display an action back to the requesting windows client with software control. Usually used in a browser application.  We have an application that is "browser based" and we are instructed to use Windows 2000K as the client. I feel that if an application is "browser based" I should be able to use and client and browser.  I used a browser on Linux with a "windows terminal services" package installed and connected to the server via a login/passwd with a browser. The problem occured when the "software control" didn't work and I was dropped to the server desktop. I had full control over the server. I immediatly contacted security.......

Please be aware of this potential and serious security problem using terminal services.

The terminal services package I tested was the LINDESK for linux. Ron

--

Please see the official ORACLE-L FAQ: http://www.orafaq.net
--

Author: Ron Rogers
  INET: RROGERS_at_galottery.org

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Fri Oct 31 2003 - 08:05:19 CST