Re: Security and SunPCi cards
From: adam morley (adam@gmi.com)Date: 08/21/01
- Previous message: Geoff Collis: "RE: tcpwrapped rpcbind/portmap?"
- In reply to: Lisa Bogar: "Security and SunPCi cards"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 21 Aug 2001 14:30:34 -0700 From: adam morley <adam@gmi.com> To: focus-sun@securityfocus.com Subject: Re: Security and SunPCi cards Message-ID: <20010821143033.A2858@chopin.ALTER.NET>
On Mon, Aug 20, 2001 at 03:59:56PM -0600, Lisa Bogar wrote:
>
> I don't have alot of experience with the windows world, but I have some
> clients interested in running Windows through a SunPCi card. My question
> is what security risks are there with running the Windows on this
> dedicated card to the rest of the system? Also, will this windows
> interface be directly accessible from other machines. I have not yet
> loaded the Windows operating system on the card, since I wanted to explore
> the risks I would undertake and also explore how I might minimize these
> risks.
ive run sunpci cards, and i can say they integrate pretty tightly. they have a few kernel level accesses (for disks and such) so they do have low level access. it does allow mouting the local filesystem (via map network drive) so theoretically, whatever user the process is running as (say, user bob) is what a remote hole in windows could gain access to, provided the card is plugged into the network. also, if some weird association was made, so that the sunpci card would open a .vbs file, then it could execute code.
realistically, they are pretty safe, very safe if not plugged into the network, but that is usually not feasible. not plugging it into the network can help a lot, or putting it behind a firewall. you could tunnel it through the sun if you had 2 nics -- plug the sunpci card into one nic and the other nic into the lan, then run proxy arp and sunscreen lite to filter incoming traffic, which should eliminate just about anything. i haven't heard of any local exploits for the sunpci software, but i would think there must be the possibility to exploit a hole somehow.
are you more concerned with remote attacks or local attacks?
>
> Thanks,
> Lisa
>
- Previous message: Geoff Collis: "RE: tcpwrapped rpcbind/portmap?"
- In reply to: Lisa Bogar: "Security and SunPCi cards"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
