RE: Windows 2003 Server - MS Rulez?

This is not a new notion. Appsence has been doing this for a while. Other implementations of this have been available over the years both for Unix and for the Windows platform.

Accordingly there are programs that allow you to mimic the properties of the target application and allow you to run malicious code.

At least this has been the case with other such programs. I have not tried it against 2003.

-=Nina=-

-----Original Message-----
From: Street [mailto:streetseeker@mail.ru] Sent: Friday, May 23, 2003 3:02 PM
To: focus-ms@securityfocus.com
Subject: Windows 2003 Server - MS Rulez?

Hello list. Today I have attended to official presentation of Microsoft Windows 2003 Server. And the representatives of Microsoft gave to my organisation an evaluation version of 2003 Server. That thing looks very secure, i.e. known methods of attack did not gave a damn thing. Also I learned an interesting feature - prohibition of launch of any program is not made by its exe name - it makes a hash from the body of program and politics are applied using this hash. I wonder whether this method is secure and if there are any ways to defeat it.

Any thoughts? Thank you in advance.

-- 
Best regards,
 Street                          mailto:streetseeker@mail.ru


------------------------------------------------------------------------
-----

*** Wireless LAN Policies for Security & Management - NEW White Paper

*** Just like wired networks, wireless LANs require network security

policies that are enforced to protect WLANs from known vulnerabilities
and threats. 
Learn to design, implement and enforce WLAN security policies to
lockdown enterprise WLANs.

To get your FREE white paper visit us at: 
http://www.securityfocus.com/AirDefense-focus-ms
------------------------------------------------------------------------
------


-----------------------------------------------------------------------------

*** Wireless LAN Policies for Security & Management - NEW White Paper ***


Just like wired networks, wireless LANs require network security policies
that are enforced to protect WLANs from known vulnerabilities and threats. 
Learn to design, implement and enforce WLAN security policies to lockdown enterprise WLANs.

To get your FREE white paper visit us at: 
http://www.securityfocus.com/AirDefense-focus-ms
------------------------------------------------------------------------------