IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 5.59 Misuse of administrator rights in Novell
Netware 3.x networks
A supervisor account or supervisor-equivalent account possesses complete
control over the Novell Netware server, with the exception of bindery
information (e.g. passwords).
It is, therefore, possible for an account with the security level "supervisor" to
have access to all stored information on the server, as long as it is not
protected by additional safeguards such as encryption. Authorised users of
such accounts are able to read, delete or change other users’ data.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000