Security Basics mailing list archives
FW: PC Anywhere and security
From: "Baker, Richard" <RBaker () stcbus com>
Date: Thu, 23 Feb 2006 16:45:03 -0600
pcAnywhere does not have the ability to block a remote user from accessing the network any differently then a locally logged in user. You have to be careful with pcAnywhere because the remote user will receive the rights of whoever is locally logged in to the workstation. Richard Baker -----Original Message----- From: Thomas Stocker [mailto:thomas.stocker () medidata ch] Sent: Thursday, February 23, 2006 4:28 AM To: security-basics () securityfocus com Subject: AW: PC Anywhere and security
Can you give me an idea on how secure are the last versions of PC Anywhere?
The have more than one security options. So you can choose authentication (windows auth, pcany ...) Take a look here: http://enterprisesecurity.symantec.com/content/displaypdf.cfm?pdfid=15&E ID=0 They offer also a good encryption.
Can a PC Anywhere connection give them access to our network even if the user credential limits the rights to specific directories on his machine ???
Keep in mind that he will be locally logged on your network as some user. Remember local exploits like pipeudadmin / privilege escalation. -- Thomas Stocker Systemadministrator ------------------------------------------------------------------------ --- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- PC Anywhere and security martin samson (Feb 22)
- AW: PC Anywhere and security Thomas Stocker (Feb 23)
- Re: PC Anywhere and security Sap . (Feb 24)
- RE: PC Anywhere and security David Gillett (Feb 24)
- <Possible follow-ups>
- FW: PC Anywhere and security Baker, Richard (Feb 24)
- RE: PC Anywhere and security Sadler, Connie (Feb 28)