Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Nessus-Users
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Plugin 26919

from [Nelson, C.M.] Network Security [Permanent Link]
Subject: Plugin 26919
Date: Wed, 14 Nov 2007 14:50:00 -0000 
Hi,

Plugin 26919 says:

........
Synopsis : It is possible to log into the remote host. Description : The remote 
host is running one of the Microsoft Windows operating systems. It was possible 
to log into it as a guest user using a random account.

In the group policy change the setting for 'Network access: Sharing and 
security model for local accounts' from 'Guest only - local users authenticate 
as Guest' to 'Classic - local users authenticate as themselves'. / CVSS Base 
Score : 5.0 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
........


Could someone explain what the significance or seriousness of this is? Does it 
suggest a remote or local exploit is possible? If so what can be achieved and 
how can I confirm that the report is correct? 

--
Carl Nelson,
Information Security Office,
IT Services,
University of Leicester, Leicester, LE1 7RH, U.K.
Tel: +44 (0)116 252 2060, Fax: +44 (0)116 252 5027
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: implications/feasibility of running nessus with higher privilege levels, Doug Nordwall
Next by Date:  Re: LDAP allows anonymous binds, Mike . Vasquez
Previous by Thread:  implications/feasibility of running nessus with higher privilege levels, SantoshKumar_Mishra
Next by Thread:  Re: Plugin 26919, Ron Gula
Indexes:  [Date] [Thread] [Top] [All Lists]