(NIS/NPF) Event log and other issues.

From: Tack (nospam@tack.flyer.co.uk)
Date: 06/28/02 

From: Tack <nospam@tack.flyer.co.uk>
Date: Fri, 28 Jun 2002 03:40:14 +0100

Hi,

I would value anyone's comments/advice concerning the following
links (I'm beginning to get bogged down and confused with some of
Symentec's replies)...

A definite security risk concerning the Event Log and un-encrypted
passwords.

(begin link 1)
http://servicenews.symantec.com/cgi-
bin/displayArticle.cgi?group=symantec.support.win9x.nis2002.general&
article=35563
(end link 1)

and...

My concerns about the ability of NMain.exe to connect to internet
unhindered in certain instances.
 
(begin link 2)
http://servicenews.symantec.com/cgi-
bin/displayArticle.cgi?product=nis&mini_version=nis_2002&button=&tpr
e=sg&article=<1020512233919.8529196516@servicenews.symantec.com>&gro
up=symantec.support.win9x.nis2002.general
(end link 2)

I won't pretend to know anything about the abilities of some
Trojans, but couldn't it be possible for one to replace NMain.exe
with a different program with the same name and then that program to
access the internet bypassing NPF?

Thanks. 

-- 
Tack.

(Email address spam blocked. Please reply via newsgroup.)

Quantcast