Re: WebCatalog security on NT
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 27189
interpreted = N
texte = >>So I assume that since people *do* host sites on NT, they still must >>have devised a method of doing that... What are the prevention >>steps that could be taken do have a somewhat secure hosting. > >Try subscribing to the ntbugtraq list at: http://www.ntbugtraq.com/ > >You can spend a good amount of time studying and securing your NT server >(or hiring an expert -- our recommendation), but you're at the mercy of >the software you run. I think the CD-Universe security hole was due to a >server running an older version of a package with a known bug. The key >is keep your software current, your security measures on high, and watch >the postings from M.S. and software vendors on security alerts. > >Last year, some on exploited a buffer overrun in a standard NT service >that let them pipe in a program to re-map port 80 to the command line. >This basically gave you access to the machine, at C:\ prompt level >through port 80. Firewalls aren't a big help here !!! Who cares?Sorry to be so blunt, but this is *not* the place for a general discussion of NT security issues -- and editing the original post to make it look like a general NT security question is not a valid excuse for posting information unrelated to WebCatalog and the WebDNA language ... :(Please folks, let's remember that this is WebDNA-Talk ... and try to keep this list focused on WebCatalog and Typhoon and the WebDNA language -- or at the very least, let's keep it related to SmithMicro and their software.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to
.This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Associated Messages, from the most recent to the oldest:
>>So I assume that since people *do* host sites on NT, they still must >>have devised a method of doing that... What are the prevention >>steps that could be taken do have a somewhat secure hosting. > >Try subscribing to the ntbugtraq list at: http://www.ntbugtraq.com/ > >You can spend a good amount of time studying and securing your NT server >(or hiring an expert -- our recommendation), but you're at the mercy of >the software you run. I think the CD-Universe security hole was due to a >server running an older version of a package with a known bug. The key >is keep your software current, your security measures on high, and watch >the postings from M.S. and software vendors on security alerts. > >Last year, some on exploited a buffer overrun in a standard NT service >that let them pipe in a program to re-map port 80 to the command line. >This basically gave you access to the machine, at C:\ prompt level >through port 80. Firewalls aren't a big help here !!! Who cares?Sorry to be so blunt, but this is *not* the place for a general discussion of NT security issues -- and editing the original post to make it look like a general NT security question is not a valid excuse for posting information unrelated to WebCatalog and the WebDNA language ... :(Please folks, let's remember that this is WebDNA-Talk ... and try to keep this list focused on WebCatalog and Typhoon and the WebDNA language -- or at the very least, let's keep it related to SmithMicro and their software.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
PCS Frames (1997)
Trouble with formula.db (1997)
Price Not Appearing (2000)
FlushDatabase Suggestion (1998)
[WebDNA] inputed text getting scrambled up in DB (2012)
why am I getting an authenticate dialog with no [protect]? (2000)
Emailer problems solved (1997)
Running 2 two WebCatalog.acgi's (1996)
Opinion: [input] should be called [output] ... (1997)
[WebDNA] Yet another call for hosts... (2009)
Code database (1998)
HELP! Search finding too much! (1998)
Passing a search through a form (2003)
WCS Newbie question (1997)
Web Catalog vs. ICAT (1997)
protect tag not working (1998)
suggestion (1997)
Help! WebCat2 bug (1997)
modified storedbuilder (was: show me your store) (2003)
mail sent from webcatalog. accented chars! (1998)