Security Basics mailing list archives
Re: AS400 Audit Checks
From: "K. K. Mookhey" <cto () nii co in>
Date: Sat, 25 Jun 2005 12:53:31 +0530
You could check out the checklist we use for AS 400 (attached). Another interesting finding we came up with, was to check all users who have Special Authorities (*SPCAUT), such as *ALLOBJ. We found about 5-6 users with SPCAUT, whose passwords were also default (ANDFTPWD). Now, the argument the client put forward was that these were service accounts, and when we tried to connect using Client Access, it gave us either no command-line access, or logged us out immediately. However, when we connected with those same accounts using FTP, we were able to download a large number of data files, and reveal critical information back to them.
Cheers, KK K. K. Mookhey Founder & CTO Network Intelligence (I) Pvt. Ltd. Web: www.nii.co.in ------------------------------------ Comprehensive Security Assessment Software http://www.nii.co.in/products.html ------------------------------------This message may contain privileged and confidential information and is solely for the use of intended recipient. If you are not the intended recipient you should not disseminate, distribute, store, print, copy or deliver this message. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system.
cruxiezzzzz () yahoo com wrote:
Hi, Anyone out there has any idea on how to audit or scan for AS400 based system? Any tool recommendations or checklist would be greatly appreciated. thanks Mag
Attachment:
as400auditchklist.xls
Description:
Current thread:
- AS400 Audit Checks cruxiezzzzz (Jun 24)
- Re: AS400 Audit Checks Víctor Llucià (Jun 24)
- Re: AS400 Audit Checks K. K. Mookhey (Jun 27)
- Re: AS400 Audit Checks BMP51 (Jun 27)
- RE: AS400 Audit Checks Clement Dupuis (Jun 27)
- Re: AS400 Audit Checks Víctor Llucià (Jun 27)
- Re: AS400 Audit Checks K. K. Mookhey (Jun 27)