Re: ... Tiny Personal Firewall ...

From: Maher Odeh (rax@X-war.org)
Date: Fri Mar 01 2002 - 03:04:17 PST

Next message: Agricola: "Phorum Discussion Board Security Bug (Email Disclosure)"

Previous message: Stefan Osterlitz: "Re: IE execution of arbitrary commands without Active Scripting or ActiveX (GM#001-IE)"
Next in thread: Scott Nursten: "Re: ... Tiny Personal Firewall ..."
Next in thread: Dave Ahmad: "Re: ... Tiny Personal Firewall ..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

hello
regarding the tiny firewall "bug", when you finish configuring the firewall
you must uncheck the "learning" mode, in this case the firewall wont popup
any window asking to permit or deny .

  thanks ,

----- Original Message -----
From: "Andrew Barkley" <andrew.barkleyat_private>
To: <bugtraqat_private>
Sent: Thursday, February 28, 2002 4:53 PM
Subject: ... Tiny Personal Firewall ...


> Hi ...
>
>
> Scanning hosts running the Tiny Personal Firewall (2.0.15a) on W2K
> workstations that have been locked (ctl + alt + del)
>
> The popup alert/dialogue jumps to the foreground, thus open to accept
> permit/deny input from the local console, even when the workstations are
> locked (ctl + alt + del).  Thus an untrusted individual whom has local
access
> to individuals workstations can scan a workstation/network, wait for the
popup
> alert dialogue and enter "permit" on unattended (locked workstations)
without
> the owners permission/knowledge, No need to first unlock (ctl + alt + del)
> ...
>
>
> CHEERS ...

Next message: Agricola: "Phorum Discussion Board Security Bug (Email Disclosure)"
Previous message: Stefan Osterlitz: "Re: IE execution of arbitrary commands without Active Scripting or ActiveX (GM#001-IE)"
Next in thread: Scott Nursten: "Re: ... Tiny Personal Firewall ..."
Next in thread: Dave Ahmad: "Re: ... Tiny Personal Firewall ..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Mar 01 2002 - 19:24:15 PST