Netware IPX管理会话伪骗漏洞

Quoted verbatim from the NMRC advisory: Use Packet Signature Level 3 everywhere, and make sure clients cannot touch their own signature settings. LAN Admins should never access a server unless using Level 3, and the security on the workstation should be restrictive enough to prevent unauthorized adjustments (i.e. use a locked-down NT client with no server services running, behind a locked door, although this simply places your trust in Microsoft). Use switched Ethernet.

来源: BID 名称: 528 链接:http://www.securityfocus.com/bid/528 来源: BUGTRAQ 名称: 19990715 NMRC Advisory: Netware 5 Client Hijacking 链接:http://marc.theaimsgroup.com/?l=bugtraq&m=93214475111651&w=2