Re: TeamViewer assessment

["51l3n73y3s" <51l3n7 () live in>]

André,

1) Haven't used this feature.

2) It works over TCP port 80 by default. Alternative of TCP 5938. You can 
map(log\block) this with the application if you are using a host based 
IPS\Firewall. Alternatively you can also use "TeamViewer Manager" if your 
organization is ready to pay for that.

3) There is no exploit that I am aware of. From the sniffing perspective, It 
uses 1024 bit RSA private/public key exchange which again is not that great 
but nevertheless there have just been claims with no one able to break 
it.(With 663 being the highest achievable.)

-Sandeep Cheema
--------------------------------------------------
From: "acastanheira2001" <acastanheira2001 () yahoo com br>
Sent: Tuesday, August 25, 2009 5:40 PM
To: <security-basics () securityfocus com>
Subject: TeamViewer assessment

> Hi,
>
> We need to make a evaluation of TeamViewer from the security perspective. 
> We
> have some questions about it:
>
> 1- Does the VPN tunnel covers all the communication channel between the
> remote support and the presentation computer?
>
> 2- How to monitor/control the software utilization in our net?
>
> 3- Is there any security issue related to TeamViewer?
>
> Thanks,
> André
>
> --
> View this message in context: 
> http://www.nabble.com/TeamViewer-assessment-tp25133014p25133014.html
> Sent from the Security Basics mailing list archive at Nabble.com.
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company and 
> how your customers can tell if a site is secure. You will find out how to 
> test, purchase, install and use a thawte Digital Certificate on your 
> Apache web server. Throughout, best practices for set-up are highlighted 
> to help you ensure efficient ongoing management of your encryption keys 
> and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------