full-disclosure - RE: Probable new MS DCOM RPC worm for Windo ws

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: jays at panix.com (Jay Sulzberger)
Subject: RE: Probable new MS DCOM RPC worm for Windo
 ws


On Fri, 26 Sep 2003, Schmehl, Paul L wrote:

> > -----Original Message-----
> > From: Jay Sulzberger [mailto:jays@...ix.com]
> > Sent: Friday, September 26, 2003 1:31 PM
> > To: Schmehl, Paul L
> > Cc: full-disclosure@...ts.netsys.com; Jay Sulzberger
> > Subject: RE: [Full-Disclosure] RE: Probable new MS DCOM RPC
> > worm for Windo ws
> >
> > Why should not each and every machine report the status of its files?
> >
> Oh, things like, you don't have sufficient access rights to check file
> properties.

Ah, so you have serious stuff on some of these machines.  Why not then hashes?

>
> I know in the ideal world that every machine logs in to the domain and
> every machine has Domain Admins in the Local Administrator group and
> every machine has the SMS agent (or some similar agent) and reports all
> its properties back to a management console and every machine can be
> controlled remotely, etc., etc., etc., yada, yada, yada.
>
> I just don't know where that ideal world is.
>
> Paul Schmehl (pauls@...allas.edu)

Thanks.

oo--JS.