[10189] in bugtraq
Novell Pandora Hack
daemon@ATHENA.MIT.EDU (Jeremy M. Guthrie)
Tue Apr 13 12:44:33 1999
Date: Mon, 12 Apr 1999 12:37:18 -0500
Reply-To: "Jeremy M. Guthrie" <jguthrie@CINET.NET>
From: "Jeremy M. Guthrie" <jguthrie@CINET.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <370DC75D.F36CFB69@relia.net>
I had a friend show me the Novell TID: 2941119 about what Novell calls the
"Pandora Hack". I suggests patching Netware to at least SP5 and setting
client/server signatures to 3. I was under the impression that the
signature fix did not take care of the issue. Comments???? It looks like
Novell wants you to see the error messages... then figure out a
corrective action against the attacker. Or I could be on crack.
--
Jeremy M. Guthrie
Network Administrator
Certified Novell Engineer
Custom Internetworking email: jguthrie@cinet.net
6404 Odana Rd. Phone: (608)-663-8000
Madison, WI 53719 FAX: (608)-276-6406
