[2861] in bugtraq
Re: System Security Scanner
daemon@ATHENA.MIT.EDU (Shaun Lowry)
Mon Jul 1 12:54:04 1996
Date: Mon, 1 Jul 1996 10:12:53 +0100
Reply-To: Shaun Lowry <s.lowry@MARCH.CO.UK>
From: Shaun Lowry <shaunl@MARCH.CO.UK>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@netspace.org>
-----BEGIN PGP SIGNED MESSAGE-----
Christopher Klaus <cklaus@iss.net> writes:
>Just a side note, we are using tixwish to help build a GUI for alpha/beta
>of a new security product for Unix boxes. XPI prolly has seen a sudden
>flurry of activity of people grabbing tixwish to run the security product.
>
>I just wanted to let everyone know here so you could see how we are using
>some tixwish widgets.
>
>
>System Security Scanner (3S) - Alpha Release
>
>----------------------------------------------------------------------------
>DESCRIPTION
>
>System Security Scanner is a system host assessment tool that will go
>through a machine searching for the following vulnerabilities:
>
> * File Permissions
> * Account Password guessing
> * Rhosts configuration
> * Shosts configuration
> * Netrc configuration
> * Inetd configuration - checks for insecure daemons
> * Host.Equiv configuration
> * MD5 Library
> We have built a library of signature checksums for patched and
> unpatched files which allows to see if the system has vendor
> installed security patches.
[snip]
As an alternative, March Systems in the UK has a similar tool based on
Tcl/Tk/Tix etc which has been in the field for over two years. More info
is available at http://www.march.co.uk/sm-top.html. Mail info@march.co.uk
regarding trials and evaluations.
Security Manager is also available in the US from Pro/Sim in Houston, Texas.
Shaun.
- --
Shaun Lowry | March Systems Ltd., http://www.march.co.uk/
PGP Key available | 14 Brewery Court, High St.,
from key servers or | Theale, UK. RG7 5AJ
via e-mail on request | +44 1734 304224
-----BEGIN PGP SIGNATURE-----
Version: 2.6.2i
iQCVAwUBMdeWk/t1GZPaCwbNAQGFLgQA1yVkCo2pU+WLpyiNX26VD9yQkFdVdRN6
Y/QFbRoChjmn5SDWtC+9x3NG5A2lSrsgPtHVEy7kJOGM1MThfJeqZ0dOCRPGnvB2
e9Q/dWDqKvBYqysSauDrF7L1r7Q2iHLVGhgDrNFrfno3D+UlbgK1+jdfsHv0MqR/
XQsOhjGPBFU=
=2suP
-----END PGP SIGNATURE-----
