FrontMotion has security issue...

General impression, suggestions, ideas, etc.
Post Reply
ufgeorge
Posts:4
Joined:Tue Mar 15, 2005 1:47 am
FrontMotion has security issue...

Post by ufgeorge » Wed Jun 22, 2005 2:03 am

Dear sir,

In my test enviroment, Win XP SP2 with Auto Logon function enabled.
When test PC power on, Windows will auto logon to shell.
Then I use RDP to login to that PC, everything is OK. At this time if I broke RDP connection by click "x" (Not from "Start", just click "x"), I can direct logon if I click ctrl-alt-delete without typing any username and password from keyboard...

George

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Post by DraconPern » Wed Jun 22, 2005 3:45 pm

Let me check on that. Thanks!
FrontMotion Lead Developer

User avatar
DraconPern
Site Admin
Posts:1218
Joined:Thu Oct 30, 2003 11:47 pm
Location:Texas
Contact:

Post by DraconPern » Thu Jun 23, 2005 4:15 am

I can direct logon if I click ctrl-alt-delete without typing any username and password from keyboard
You have Auto Logon function enabled, it is suppose to login automatically at the console so this is not a security issue. Even with autologin however, RDP won't let you login without a password. You can configure the RDP client to automatically supply a password however.
FrontMotion Lead Developer

Post Reply