Veritas-bu

[Veritas-bu] Securing java gui port

2006-12-12 11:55:47
Subject: [Veritas-bu] Securing java gui port
From: simont at mitre.org (Tetelbaum, Simon I.)
Date: Tue, 12 Dec 2006 11:55:47 -0500
I'm installing netbackup on a machine destined for our dmz and getting
pinged about this by infosec:
 
"The remote host is running the Veritas NetBackup Java Console
service.
This service is used by the NetBackup Java Console GUI to
manage the backup server.
A user, authorized to connect to this service, can use it as
a remote shell with system privileges by sending
'command_EXEC_LIST' messages."
 
Can I configure this not to be a remote shell? Any recommendations?
Thanks.
 
-Simon
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: 
http://mailman.eng.auburn.edu/pipermail/veritas-bu/attachments/20061212/0191e7e3/attachment.html

<Prev in Thread] Current Thread [Next in Thread>
  • [Veritas-bu] Securing java gui port, Tetelbaum, Simon I. <=