OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NTSecAdvice Archives: Re: Windows NT 4.0 and C2 - New certs

Re: Windows NT 4.0 and C2 - New certs

Subject: Re: Windows NT 4.0 and C2 - New certs
From: Kevin_E_WetzelNOTES.TCS.TREAS.GOV
Date: Fri Dec 03 1999 - 13:54:29 CST

This seems strange to me since no government agency in sound judgement would put
anything above sensitive on a Microsoft platform. I would like ask a question
and see if anyone could provide some feedback on this topic. First of all it was
previously stated that NT Server was not C2 certified unless it was disconnected
from the network. This recent information appears to say that NT is C2 certified
when connected to the network. I would love to show you all the plain text
authentication packets that are sent over a network using this OS and then ask
if you still think its C2 secure. Any comments would be welcomed.

                                                        Kevin Wetzel

Steve <steveSECURESOLUTIONS.ORG> on 12/03/99 02:28:22 PM

Please respond to "Discussion regarding Windows-related security vulnerabilities
      and risks." <win2ksecadviceLISTSERV.NTSECURITY.NET>

To: win2ksecadviceLISTSERV.NTSECURITY.NET
cc: (bcc: Kevin E Wetzel/TCS/TREAS/GOV)
Subject: Windows NT 4.0 and C2 - New certs

Microsoft announced today that they recieved C2 certification on 6 new
configurations of Windows NT 4.0.

The configurations are:

* Server operating as a primary domain controller
* Server operating as a backup domain controller
* Server operating as a member server
* Server operating as a non-member server
* Workstation as a domain member
* Workstation as a non-domain member

Check out the following MS url.

http://www.microsoft.com/security/issues/c2summary.asp

Regards;

Steve Manzuik
Moderator
Win2K Security Advice

_____________________________________________________________________
** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE win2ksecadvice"
** FOR A WEEKLY DIGEST, send the command "SET win2ksecadvice DIGEST"
SEND ALL COMMANDS TO: listservlistserv.ntsecurity.net

_____________________________________________________________________
** TO UNSUBSCRIBE, send the command "UNSUBSCRIBE win2ksecadvice"
** FOR A WEEKLY DIGEST, send the command "SET win2ksecadvice DIGEST"
SEND ALL COMMANDS TO: listservlistserv.ntsecurity.net

This archive was generated by hypermail 2b27 : Fri Dec 03 1999 - 14:10:31 CST