Shiva dial-in security loophole

Thread View: comp.os.netware.connectivity

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Phil Schuman Fri, 21 Feb 1997 00:00

#46

Author: Phil Schuman
Date: Fri, 21 Feb 1997 00:00

20 lines
1510 bytes

I've noticed this sequence to be a dial-in security problem - 
	- dialing into a Shiva - 

1. We don't have virtual sessions setup - but it would not matter either way - 
2. A user dials into Shiva - uses internal name list to gain access
3. Logs into Novell world - NDS or Bindery - does not matter
4. Then disconnects - BUT does not logout
5. ANY USER DIALING INTO SHIVA WILL GET CONNECTED TO THIS ACTIVE
	 AND LOGGED-IN USER SESSION
It's like an 'open desk' PC just logged-in 
waiting for someone to walk by and use it !!

Is there any way of logging out a user session 
or signalling Novell when the carrier drops on the dial-in modem ??

What are other folks doing - 
as this must be an ongoing security nightmare for remote access ??

Phil -

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads