RE: NMRC Advisory: RealSecure KeyManager Issue - Further Explanation

From: hellNbak (hellnbakat_private)
Date: Fri Mar 22 2002 - 14:55:49 PST

  • Next message: bugtraqat_private: "Re: PHP script: Penguin Traceroute, Remote Command Execution" 

    In attempt to perhaps get others who have access to Nokia Hardware to
confirm this issue, here are the steps required to replicate my finding.

1.)	Install RealSecure IPSO using the Nokia Voyager web tool.
2.)	Install REalSecure Console to NT Box
3.)	Connect and configure Console as key manager
4.)	Install another box as the REalSecure console and name this box
Starscream and create a username skank.
5.)	Login as skank launch the console and attempt to connect to the
Nokia box.

From here you should be able to connect to the Nokia box as
starscream_skank is already a keymanager.

If anyone can re-confirm what I have already tested a couple times that
would be great.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"I don't intend to offend, I offend with my intent"

hellNbakat_private
http://www.nmrc.org/~hellnbak

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

    This archive was generated by hypermail 2b30 : Fri Mar 22 2002 - 18:22:39 PST