Re: Finding PC Anywhere on Client Machines

From: Jason Sheffield (jsheffieldat_private)
Date: Thu Jul 12 2001 - 15:08:46 PDT

  • Next message: Kohlenberg, Toby: "RE: Dsniff'ng wireless networks"

    Terry,
      If you have a Corporate version of pcA 10.0, it includes a utility called
    RAPS (Remote Access Perimeter Scanner), which is a special purpose "war
    dialer" that supports TCP/IP, TAPI, and CAPI address and will look for
    pcAnywhere, LapLink, Carbon Copy, ReachOut, Timbuktu, PC Duo, Virtual
    Network Computing (VNC), NetMeeting, NetBus, Terminal Server, Citrix
    Server, X Server, PPP Server, and Windows RAS Server.  If it finds a
    pcAnywhere client running in an insecure fashion (no username or password),
    it will shut down the client.  This utility is not included in any of the
    consumer "yellow box" versions.
    
    Regards,
    Jason Sheffield, CISSP
    Senior Systems Engineer
    North American Region - Symantec
    The Woodlands, Texas
    email: jsheffieldat_private
    http://www.symantec.com
    
    
    
                                                                                                                                  
                        "Dunlap,                                                                                                  
                        Terry J (US -        To:     pen-testat_private@SMTP@Exchange                                     
                        Cincinnati)"         cc:                                                                                  
                        <tdunlap@delo        Subject:     Finding PC Anywhere on Client Machines                                  
                        itte.com>                                                                                                 
                                                                                                                                  
                        07/12/2001                                                                                                
                        08:49 AM                                                                                                  
                                                                                                                                  
                                                                                                                                  
    
    
    
    
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    Short of using ISS or war dialing, does anyone know of other
    tools/methods to locate installed versions of PC Anywhere on client
    machines?
    
    Thanks in advance for your replies!
    
    Terry Dunlap, MCSE, MCP, Network+, A+
    Secure e-Business Consultant
    - ----------------------------------------
    Deloitte & Touche
    250 East Fifth Street
    Suite 1900
    Cincinnati, Ohio 45201
    (513) 784-7102
    
    -----BEGIN PGP SIGNATURE-----
    Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
    
    iQA/AwUBO02rbAyPQhKwR6xfEQK4+gCg8zuUz8J9u55l2wFoDaEbpAJ5tS4An14H
    7trjBqH656GcUhKmyHsX2gH/
    =jZoI
    -----END PGP SIGNATURE-----
    - This message (including any attachments) contains confidential
    information
    intended for a specific individual and purpose, and is protected by law.  -
    If you are not the intended recipient, you should delete this message and
    are hereby notified that any disclosure, copying, or distribution of this
    message, or the taking of any action based on it, is strictly prohibited.
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA)
    Service For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Thu Jul 12 2001 - 17:55:29 PDT