🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.netware.misc
Article #96

Shiva - dialup/logout - security problem

#96
From: Phil Schuman
Date: Fri, 24 Jan 1997 00:00
14 lines
1244 bytes
we just installed a Shiva Lanrover on our Novell 4.1 IPX LAN - 

In playing with it - I've noticed a couple of things....
one of them is a security issue - with no resolution as far as I can tell..

When I dial into the Shiva - and login - (server, NDS, etc)
and then just disconnect....  
I don't get logged out of NDS nor the Server - 
	(like pulling the 10BT cable for a few seconds)
However - this is a MAJOR loophole - for a dialup access server - 
ANY user dialing into that same port - will already be logged in with my ID!!
How have others addressed this issue - ?
Phil - 
Technical Details
Message-ID: <5c9jnr$f0j@eve.enteract.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fe659,617c3e899b096ff3,start
X-Google-Attributes: gidfe659,public
X-Google-Thread: f8bf7,617c3e899b096ff3,start
X-Google-Attributes: gidf8bf7,public
X-Google-Thread: fa939,617c3e899b096ff3,start
X-Google-Attributes: gidfa939,public
From: pschuman@interserv.com (Phil Schuman)
Subject: Shiva - dialup/logout - security problem
Date: 1997/01/24
Message-ID: <5c9jnr$f0j@eve.enteract.com>
X-Deja-AN: 211893542
content-type: Text/Plain; charset=US-ASCII
organization: phil's org
mime-version: 1.0
newsgroups: comp.os.netware.misc,bit.listserv.novell,comp.os.netware.connectivity