Penetration Testing mailing list archives

Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME]


From: "Michael Boman" <michael.boman () gmail com>
Date: Mon, 15 Sep 2008 21:32:42 +0200

On Mon, Sep 15, 2008 at 4:53 PM, Alexandru Bradescu-Popa
<alexbp () alexbp ro> wrote:
Interesting security procedures they have. Help-desk with access on
/etc/shadows. No written request for high sensitive files. They'll pass with
flying colors any security audit.

But was the helpdesk aware that /etc/shadow is a highly sensitive file
to begin with?

Best regards
Michael Boman

-- 
http://michaelboman.org - Security Blog & Wiki

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------


Current thread: