Testing exploits

[Steve <spassino () mac com>]

I am curious to everyone's opinion on the following ....We have a small
group of servers in our environment that run out of date operating
systems, primarily windows 2000 and redhat 3.  We are doing the dance
with business teams, migration is happening but slow.
Our CTO has asked the security team to begin testing exploit code
against these servers - a successful exploit would move that server up
the priority list of getting it migrated off onto a supported operating
system.  Our tests only hit non-production servers so production is not
impacted.


Does anyone else have a similar process or tried something similar and
was it successful ?

--Steve
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com