SCAuto

[tommy]

With the proper tools it is posible to gain access to sc if SCAuto is runnning standard OOB.



It is advisable to stop SCAuto listener port and the event process if SCAuto is not in use.



If SCAuto is in use it is advised to rename all standard events and or delete events not used.

[cace1]

I think everyone should be made aware that they have this security exposure and request Peregrine to close it. i.e. Insist that scauto_connect have authentication built around it such that a Userid/Password be required and enforced. In fact it might be best to enforce it at SCAUto install time by requesting a Userid/Password at that time and if not provided disable SCAuto startup until provided. Just a thought.

Regards,

Carl :smile: