full-disclosure - RE: Probable new MS DCOM RPC worm for Windo ws

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: pauls at utdallas.edu (Schmehl, Paul L)
Subject: RE: Probable new MS DCOM RPC worm for Windo ws

> -----Original Message-----
> From: Jay Sulzberger [mailto:jays@...ix.com] 
> Sent: Friday, September 26, 2003 1:31 PM
> To: Schmehl, Paul L
> Cc: full-disclosure@...ts.netsys.com; Jay Sulzberger
> Subject: RE: [Full-Disclosure] RE: Probable new MS DCOM RPC 
> worm for Windo ws
> 
> Why should not each and every machine report the status of its files?
> 
Oh, things like, you don't have sufficient access rights to check file
properties.

I know in the ideal world that every machine logs in to the domain and
every machine has Domain Admins in the Local Administrator group and
every machine has the SMS agent (or some similar agent) and reports all
its properties back to a management console and every machine can be
controlled remotely, etc., etc., etc., yada, yada, yada.

I just don't know where that ideal world is.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/