| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
 |
 | |||
| Oracle FAQ | Your Portal to the Oracle Knowledge Grid | |
|
| |||
Home -> Community -> Mailing Lists -> Oracle-L -> Re: Win termin services alert
Mladen,
I have no control over the server. The service and info are provided
under a contract that we entered into a while back.
I checked the troubled server today and it worked as requested using
the linux client and browser. They must have installed the patches or
fixed the design after our security group contacted them.
Thanks,
Ron
>>> mladen_at_wangtrading.com 10/31/03 09:49AM >>>
You've obvoiusly forgotten to install "the latest security patch from
Microsoft",
or "security update from Microsoft Corporation".
Luckily, they're available readily on the internet. I see them every
day in my
mailfilter.log file when I browse it with "grep -i deleted
/tmp/mailfilter.log".
On 10/31/2003 09:05:19 AM, Ron Rogers wrote:
> List.
> Reguarding Windows Terminal services...
> It is used to remotely display an action back to the requesting
windows
> client with software control. Usually used in a browser application.
> We have an application that is "browser based" and we are
instructed
> to use Windows 2000K as the client. I feel that if an application is
> "browser based" I should be able to use and client and browser.
> I used a browser on Linux with a "windows terminal services"
package
> installed and connected to the server via a login/passwd with a
browser.
> The problem occured when the "software control" didn't work and I
was
> dropped to the server desktop. I had full control over the server. I
> immediatly contacted security.......
>
> Please be aware of this potential and serious security problem using
> terminal services.
>
> The terminal services package I tested was the LINDESK for linux.
> Ron
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.net
> --
> Author: Ron Rogers
> INET: RROGERS_at_galottery.org
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting
services
>
Mladen Gogala
Oracle DBA
Note:
This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please immediately delete it and
all copies of it from your system, destroy any hard copies of it and
notify the sender. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the
intended recipient. Wang Trading LLC and any of its subsidiaries each
reserve the right to monitor all e-mail communications through its
networks.
Any views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorized
to state them to be the views of any such entity.
-- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: mladen_at_wangtrading.com Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Ron Rogers INET: RROGERS_at_galottery.org Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).Received on Fri Oct 31 2003 - 09:13:29 CST
 |
 |