248 Managing Network Vulnerability Assessment
Finding 6: WINS/DHCP Server XXX_ntadmin
The server XXX_NTADMIN is used as both the WINS and DHCP server.
Additionally, it runs FPNW to allow connection to Novell NetWare. The
machine was tested both from the network and in a configuration audit. The
system had numerous instances of Novell passwords that were blank or easily
guessed, shares that were unprotected, and configuration problems within the
setup of the system. The problems appear to be the result of the FPNW service
and how it presents the Novell accounts to NT.
Urgency Rating*****
Risk
Because of the vulnerabilities associated with this system, it is highly suscep-
tible to being compromised. Compromising the naming system of the network
would render ...