OBRS - Open Business Reporting Standard

[Paul Rogers <paul.rogers () mis-cds com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi everyone,

Sorry for the crosspost but it might be relevant to the Dev list as
well.

Has anyone come across OBRS or applications utilising OBRS in the
wild when performing a penetration test or audit? I've been asked to
comment on the system's security, but have been unable to find any
detailed information so far. Does anyone have documentation or
previous experience with this regarding security? If they do, could
someone point me in the right direction or provide links /
documentation please.

The only security related information I could find was located on the
OBRS website:

http://www.obrs.org/obrs.html#accesscontrol

The service runs on TCP port 1092.

Cheers,

Paul Rogers,
Network Security Analyst.

MIS Corporate Defence Solutions Limited

Tel:            +44 (0)1622 723422 (Direct Line)
                +44 (0)1622 723400 (Switchboard)
Fax:            +44 (0)1622 728580 
Website:        http://www.mis-cds.com/

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.3

iQA/AwUBO2fnOLnKcoQ5QY/3EQKUFQCg/OXYyL4hVmRCHZW+a6AFpay/BmQAn1Ro
aaWRMDL6WXrYhz75GL5K+bhC
=Cz75
-----END PGP SIGNATURE-----