Re: SAP Security

From: Rainer Duffner (duffner@fh-konstanz.de)
Date: Wed Jun 13 2001 - 17:20:35 PDT

Next message: todd + 1: "finding webroot on IIS"

Previous message: H D Moore: "Re: iXsecurity.tool.briiis.3.02"
In reply to: Johann van Duyn: "SAP Security"
Next in thread: Dave Piscitello: "Re: SAP Security"
Reply: Dave Piscitello: "Re: SAP Security"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, 13 Jun 2001, Johann van Duyn wrote:

> Hi there...
>
> I'm planning to run a lightweight internal penetration test against some of
> our servers, and have run into a snag: security information on WinNT, Unix,
> Oracle, etc. is quite easy to find, but I am struggling to find anything
> good on SAP R/3. Most of the stuff is very vague, or refers to securing
> network transmissions against eavesdropping.
>
> Anyone have any real information on SAP security, especially weaknesses?
> :-)

I found this some time ago, the content seems to move on and off to
different sites. A good opportunity to save it to HD...

http://www.hoelzner.de/security/sap-os.html

The text is German, but mentions a "SAP Security Guide" , which is hopefully
available in other languages.


cheers,
Rainer
-- 
========================================
 Rainer Duffner , Konstanz, Germany
 eMail:  duffner@fh-konstanz.de
       rainer.duffnerat_private
http://www-stud.fh-konstanz.de/duffner/
========================================

Next message: todd + 1: "finding webroot on IIS"
Previous message: H D Moore: "Re: iXsecurity.tool.briiis.3.02"
In reply to: Johann van Duyn: "SAP Security"
Next in thread: Dave Piscitello: "Re: SAP Security"
Reply: Dave Piscitello: "Re: SAP Security"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 13 2001 - 22:47:16 PDT