Bugtraq mailing list archives
Re: Remote Tools w/Exceed v.6.0.1.0 fer 95
From: djshaw () SOUTHERNCO COM (Shaw, Daniel J.)
Date: Thu, 3 Dec 1998 11:53:10 -0600
I don't see this file in Exceed 6.1 for NT. Do you have logging enabled? The only file I saw was the hclmrul.ini file in c:\(installdir)\(installuser) directory which contains the following: [Host_name] MAXITEMS=10 Host 0=myhostname ITEMS=2 [User_name] MAXITEMS=10 Host 0=myusername ITEMS=2 [Command_name] MAXITEMS=10 Host 0=mycommand ITEMS=3 Host 1=mycommand [Remote_name] MAXITEMS=10 [Local_user] MAXITEMS=10 There is a logging enable/disable function under XConfig. However, I'm not sure (and I doubt) it would affect the Remote Tools. Danny Shaw
-----Original Message----- From: Sparks, Michael ME [SMTP:Sparks.Michael.ME () BHP COM AU] Sent: Wednesday, December 02, 1998 9:57 AM To: BUGTRAQ () netspace org Subject: Remote Tools w/Exceed v.6.0.1.0 fer 95 Hello All, I was just looking through my root directory and noticed a file called test.log. This file contains the machine name, username, and password all in clear text for the machine that you are rexec'ing to. Ex: ======================================================================== C:\WINDOWS\SYSTEM\HUMMBIRD\RSHCTRL.OCX - Wed Dec 02 08:47:11 1998 ======================================================================== Socket Success: Family = 2, Type = 1, Protocol = 0, New Socket = 20 IoctlSocket Success: Socket = 20, Cmd = 8004667E, Arg = 1 Bind Success: Socket = 20, Addr = 0.0.0.0,631 Connect Error: Socket = 20, Addr = ??.??.??.??,512, Error = 10035 Send Success: Socket = 20, Flags = 0, Sent 1 of 1 00 . Send Success: Socket = 20, Flags = 0, Sent 14 of 14 74 68 69 73 69 73 6D 79 6C 6F 67 69 6E 00 thisismylogin. Send Success: Socket = 20, Flags = 0, Sent 17 of 17 74 68 69 73 69 73 6D 79 70 61 73 73 77 6F 72 64 thisismypassword 00 . Send Success: Socket = 20, Flags = 0, Sent 3 of 3 6C 73 00 ls. Recv Success: Socket = 20, Flags = 0, Len = 19 01 70 61 73 73 77 6F 72 64 20 74 6F 6F 20 6C 6F .password too lo 6E 67 0A ng. Recv Success: Socket = 20, Flags = 0, Len = 0 Close Success: Socket = 20 ======================================================================== I don't know if anyone uses rtools but if you do and user rexec just beware. I was able to disable this by echo "" > c:\test.log ; attrib +r c:\test.log. I apoligize if this is known and or not in the apropriate context of this list. Michael Sparks sparks.michael.me () bhp com au Systems Administrator "Tis most impossible to remove a misunderstanding." A.
Current thread:
- Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Robby Dunkerson (Dec 03)
- <Possible follow-ups>
- Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Shaw, Daniel J. (Dec 03)
- Re: Remote Tools w/Exceed v.6.0.1.0 fer 95 Adam Shiffman (Dec 03)