Mladen, I have no control over the server. The service and info are provided under a contract that we entered into a while back. I checked the troubled server today and it worked as requested using the linux client and browser. They must have installed the patches or fixed the design after our security group contacted them. Thanks, Ron
>>> [EMAIL PROTECTED] 10/31/03 09:49AM >>> You've obvoiusly forgotten to install "the latest security patch from Microsoft", or "security update from Microsoft Corporation". Luckily, they're available readily on the internet. I see them every day in my mailfilter.log file when I browse it with "grep -i deleted /tmp/mailfilter.log". On 10/31/2003 09:05:19 AM, Ron Rogers wrote: > List. > Reguarding Windows Terminal services... > It is used to remotely display an action back to the requesting windows > client with software control. Usually used in a browser application. > We have an application that is "browser based" and we are instructed > to use Windows 2000K as the client. I feel that if an application is > "browser based" I should be able to use and client and browser. > I used a browser on Linux with a "windows terminal services" package > installed and connected to the server via a login/passwd with a browser. > The problem occured when the "software control" didn't work and I was > dropped to the server desktop. I had full control over the server. I > immediatly contacted security....... > > Please be aware of this potential and serious security problem using > terminal services. > > The terminal services package I tested was the LINDESK for linux. > Ron > > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.net > -- > Author: Ron Rogers > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > Mladen Gogala Oracle DBA Note: This message is for the named person's use only. It may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you receive this message in error, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. Wang Trading LLC and any of its subsidiaries each reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Mladen Gogala INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). -- Please see the official ORACLE-L FAQ: http://www.orafaq.net -- Author: Ron Rogers INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
