Re: Securing eRIC express

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2007-01-02 Thomas D. wrote:
> we are going to use some "eRIC express" cards, to administrate some
> remote servers.
> These cards are reachable through the internet, 24h/7d.
>
> The handbook tells us, that we will have to use a username/password
> for authentication.
> I am note sure how secure this will be. Is there anything we can do to
> protect these cards?

The embedded web server of the eRIC express cards supports SSL. Enable
"Force HTTPS" and have strong password(s) and you should be fine.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------