Great Circle Associates Firewalls
(January 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: What gave you that idea ?
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Date: Fri, 6 Jan 95 15:38:45 -0500
To: "firewalls @ greatcircle . com"@UVS1.dnet.mmc.com

Wulf Losee rites:
> Correct me if I'm wrong (please!), but since DOS and regular Windows (both
> Windows 3.x and and Windows for Warehouses) are not multitasking,
> multithreading operating systems it would be impossible to subvert these
> systems unless the cracker were dialing in through a modem or actually
> sitting at the PC's console.

Well I have an old 386-16 on the desk behind me running NW-DOS 7.0 using
TASKMGR. While the DOS prompt shows on the screen, two background tasks
can be running, FTP's SMTPSRV and FTPSRV which can accept E-mail and process
FTP requests without ever disturbing my reading of whatever mail arrived.

Strobe the machine from the net while in that state and it will respond to
SMTP, FTP, and PING. Unless you know how to read the broadcast lines to
SMTP or FTP, the fact that it is a lowly PC will never be apparent.

The same can be done from a machine running Windoze or DesqView since I have.
So let's just consider that I might set a window up with TELNETD (heck I have
so know it can be done), then anyone can just telnet in and work (albeit
a bit slowly) on the PC just as if it was multiuser.

Bottom line: if you can think of it, there is usually a way it can be done,
even with DOS on a PC. The net doesn't care.
						Warmly,
							Padgett

Indexed By Date Previous: Re: FW: PC Take-Over -- reply
From: Rens Troost <rens @ imsi . com>
Next: Re: spoofing TCP/SYN packets?
From: paul @ hawksbill . sprintmrn . com (Paul Ferguson)
Indexed By Thread Previous: Re: need makefile for Solaris 2.4
From: "Mats Akerberg, Exo Data AB" <mats @ exodata . se>
Next: TCP/IP Firewall System Product Comparisons
From: roosekj @ freedom . msfc . nasa . gov (kathryn Roose)

Google
 
Search Internet Search www.greatcircle.com