Re: Pen-Testing Lotus Notes/Domino

From: Steve Cogan (Steve.Coganat_private)
Date: Wed Oct 10 2001 - 07:14:28 PDT

  • Next message: Yoann Le Corvic: "RE: Firewalls & SSL"

    Johann,
    
    Check out http://domilockbeta.2y.net/ & http://www.dominosecurity.org/.
    
    Are you running Domino HTTP or IIS integration ?
    
    Steve Cogan.
    ----- Original Message -----
    From: Johann van Duyn <Johann_van_Duynat_private>
    To: <pen-testat_private>
    Sent: Tuesday, October 09, 2001 10:54 AM
    Subject: Pen-Testing Lotus Notes/Domino
    
    
    > Hi there...
    >
    > I am about to do a security audit (of the semi-pen-test variety) on a
    > network with Lotus Domino and Notes R5 running on it.
    >
    > I am a bit out of my depth regarding Domino and Notes, being a bit of an
    > Exchange fan myself. Can anyone give me a few pointers and possible
    gotchas
    > that could benefit me (and, ultimately, the company I'm working for) in
    > this?
    >
    > Much appreciated.
    >
    > :-)
    >
    > Johann
    > Confidentiality Notice: The information in this document and
    > attachments is confidential and may also be legally privileged.
    > It is intended only for the use of the named recipient. Internet
    > communications are not   secure and therefore British American
    > Tobacco does not accept legal responsibility for the contents of
    > this message. If you are not the intended recipient,please notify us
    > immediately and then delete this document. Do not disclose the
    > contents of this document to any other person, nor take any copies.
    > Violation of this notice may be unlawful.
    >
    >
    >
    > --------------------------------------------------------------------------
    --
    > This list is provided by the SecurityFocus Security Intelligence Alert
    (SIA)
    > Service. For more information on SecurityFocus' SIA service which
    > automatically alerts you to the latest security vulnerabilities please
    see:
    > https://alerts.securityfocus.com/
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
    Service. For more information on SecurityFocus' SIA service which
    automatically alerts you to the latest security vulnerabilities please see:
    https://alerts.securityfocus.com/
    



    This archive was generated by hypermail 2b30 : Wed Oct 10 2001 - 08:06:30 PDT