Penetration Testing mailing list archives

Re: Finding PC Anywhere on Client Machines


From: "Jason Sheffield" <jsheffield () symantec com>
Date: Thu, 12 Jul 2001 17:08:46 -0500


Terry,
  If you have a Corporate version of pcA 10.0, it includes a utility called
RAPS (Remote Access Perimeter Scanner), which is a special purpose "war
dialer" that supports TCP/IP, TAPI, and CAPI address and will look for
pcAnywhere, LapLink, Carbon Copy, ReachOut, Timbuktu, PC Duo, Virtual
Network Computing (VNC), NetMeeting, NetBus, Terminal Server, Citrix
Server, X Server, PPP Server, and Windows RAS Server.  If it finds a
pcAnywhere client running in an insecure fashion (no username or password),
it will shut down the client.  This utility is not included in any of the
consumer "yellow box" versions.

Regards,
Jason Sheffield, CISSP
Senior Systems Engineer
North American Region - Symantec
The Woodlands, Texas
email: jsheffield () symantec com
http://www.symantec.com



                                                                                                                        
      
                    "Dunlap,                                                                                            
      
                    Terry J (US -        To:     pen-test () securityfocus com@SMTP@Exchange                            
         
                    Cincinnati)"         cc:                                                                            
      
                    <tdunlap@delo        Subject:     Finding PC Anywhere on Client Machines                            
      
                    itte.com>                                                                                           
      
                                                                                                                        
      
                    07/12/2001                                                                                          
      
                    08:49 AM                                                                                            
      
                                                                                                                        
      
                                                                                                                        
      




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Short of using ISS or war dialing, does anyone know of other
tools/methods to locate installed versions of PC Anywhere on client
machines?

Thanks in advance for your replies!

Terry Dunlap, MCSE, MCP, Network+, A+
Secure e-Business Consultant
- ----------------------------------------
Deloitte & Touche
250 East Fifth Street
Suite 1900
Cincinnati, Ohio 45201
(513) 784-7102

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO02rbAyPQhKwR6xfEQK4+gCg8zuUz8J9u55l2wFoDaEbpAJ5tS4An14H
7trjBqH656GcUhKmyHsX2gH/
=jZoI
-----END PGP SIGNATURE-----
- This message (including any attachments) contains confidential
information
intended for a specific individual and purpose, and is protected by law.  -
If you are not the intended recipient, you should delete this message and
are hereby notified that any disclosure, copying, or distribution of this
message, or the taking of any action based on it, is strictly prohibited.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert
(SIA)
Service For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/




----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: