19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Threats Catalogue Deliberate Acts Remarks<br />

____________________________________________________________________ .........................................<br />

T 5.55 Login Bypass<br />

After successful login to the Novell Netware server the login-scripts (systemlogin-script,<br />

user-login-script) creates a personal network environment for the<br />

user.<br />

By using options when executing LOGIN.EXE under Novell Netware, neither<br />

the system-login-script nor the user-login-script of the selected Novell<br />

Netware server will be activated, thereby avoiding the security settings<br />

implemented in the login-scripts. Security setting implemented in the login<br />

scripts can therefore, be circumvented. Thus, after an authorised login and<br />

with the help of map commands, it is possible for the user to "move around"<br />

on the Novell Netware server, independent of the set parameters of the login<br />

scripts (system login-scripts, user login-scripts). In conjunction with<br />

insufficient allocation of privileges, this can lead to a situation whereby the<br />

user has access to information which should normally not be available to him.<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!