OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Security Advisory: Netscape Administration Server Password Disclosure. ( netscape.ad-1.00-
From: amonotod (amonotodNETSCAPE.NET)
Date: Tue Jul 18 2000 - 15:38:33 CDT


> Solution:
> 2. Shut down the administration server in the following ways:
> C. On NT:
> To stop the administration server, go to Control
> Panel|Services. Select the "Netscape Administration Server"
> and click Stop. To restart it, click Start.

Since you're already there, click Startup, and select Manual, then click OK.
This will prevent the server from starting automatically when the system
starts, which will prevent anyone from trying to brute-force the
administrative (default is "admin") account.

my 2¢,
amonotod

____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at http://webmail.netscape.com.