Full Disclosure mailing list archives

Officescan 5.5.6 authentication bug?


From: "Casey Ellis" <casey () networkit com au>
Date: Wed, 12 May 2004 09:23:43 +1000

Gentlemen,
 
Had a flash in the pan abnormality with an installation of Officescan.
 
Installed and configure as per normal with IIS frontend listening on TCP 80 (standard configuration), when you 
configure it like this and hit the login screen with a web browser (I used IE6, and I believe it was a completely new 
session, the machine had been rebooted in betwenn the last legit authentication and this incident) there is an 
authentication field and another field for entering a serial number. 
 
On entry of the serial number it accepted but then proceeded to authenticate me and allow me into the console.
 
Has anyone/can anyone verify this/what could be causing it?
 
Regards,
Casey Ellis
Blue Cable Monkey
 

Current thread: