Results 1 to 3 of 3

Thread: security issues when using a LiveCD

  1. #1
    Junior Member
    Join Date
    Mar 2005
    Posts
    2

    security issues when using a LiveCD

    Hi there. I am wondering what security issues arise when using a LiveCD on a machine with an existing OS, in particular Windows. I understand that Knoppix can mount partitions in read-only mode. In such case, one may still save work to a Zip-disk, USB-key, etc. However, as regards access to authentication servers, (we're in a large campus which is predominately Windows (clients and servers)), network access, etc., does the use of a LiveCD (be it Linux, BSD, etc) impose any significant security threats to the existing infrastructure? Thanks in advance.

  2. #2
    Junior Member registered user
    Join Date
    Mar 2005
    Posts
    29
    As long as you allow your users to boot a LiveCD, anything is no longer secure. Don't even think M$ could be intact, there are LiveCDs such as AUSTRUMI built with capabilities to blank the administrator's password even the latest patches or service packs were applied.

  3. #3
    Senior Member registered user
    Join Date
    Oct 2004
    Location
    london town
    Posts
    220
    does a live cd pose as any threat to your windows network do you mean?

    in some ways yes but only if someone is able to boot up a windows machine using a linux live cd and this is only a threat because people can copy what ever data from the hard drive. such as encrypted password files. other then that i dont belive it will pose any threat. unless of course your windows boxes are 1 not configured correctly such as weak passwords(blank passwds) outdated servers (iis netbios etc)but this would be no differnt if someone was using windows and wanted to attack your network. they will be asked for a password when trying to access windows shares

    a machine running a live linux cd is unlikly to get compramised. but is possible the servers are not always upto date and local privilege escalation is not that much of a problem. for instance if you was to allow someone to log in using the knoppix account. they could with ease jump to root with sudo su or just su as it doesnt ask for a password from what i remember.

    so there are certain threats but you just have to treat them like most normal threats and take steps against them. such as passwording the bios so people cant boot live cds. disabling guest accounts on windows machines. making sure all accounts have passwords(even though ms alot of the time doesnt allow people to sign on with blank passwords)making sure the computers are upto date.

Similar Threads

  1. Two Issues - Zombies and Security...
    By Cuddles in forum General Support
    Replies: 4
    Last Post: 09-13-2004, 08:11 AM
  2. Hdd Security
    By NetKatz in forum Hdd Install / Debian / Apt
    Replies: 2
    Last Post: 05-02-2004, 02:38 PM
  3. Security
    By pierrevn in forum General Support
    Replies: 5
    Last Post: 12-12-2003, 07:34 AM
  4. Security and apt-get
    By Edix in forum Hdd Install / Debian / Apt
    Replies: 1
    Last Post: 11-10-2003, 08:20 PM
  5. security
    By kipizit in forum General Support
    Replies: 1
    Last Post: 11-07-2003, 03:08 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Cisco SG95-16 16-Port Gigabit Switch SG95-16-KR picture

Cisco SG95-16 16-Port Gigabit Switch SG95-16-KR

$47.00



GENUINE CISCO QSFP-40/100-SRBD 100G QSFP Transceiver  picture

GENUINE CISCO QSFP-40/100-SRBD 100G QSFP Transceiver

$129.99



Cisco SG110 24 Port Gigabit Ethernet Switch w/ 2 x SFP SG110-24 picture

Cisco SG110 24 Port Gigabit Ethernet Switch w/ 2 x SFP SG110-24

$117.00



Cisco SG110 8 Port Gigabit Ethernet Switch SG110D-08-BR picture

Cisco SG110 8 Port Gigabit Ethernet Switch SG110D-08-BR

$39.00



Cisco WS-C3850-48P-L 48-Port Gigabit 3850 PoE Switch w/ 715W+ C3850-NM-4-1G Mod picture

Cisco WS-C3850-48P-L 48-Port Gigabit 3850 PoE Switch w/ 715W+ C3850-NM-4-1G Mod

$79.00



Cisco WS-C3750X-48T-S 48 Port 3750X Gigabit Switch - Same Day Shipping picture

Cisco WS-C3750X-48T-S 48 Port 3750X Gigabit Switch - Same Day Shipping

$49.99



Cisco Nexus N3K-C3048TP-1GE 48 Port Switch w/ Dual Power - Same Day Shipping picture

Cisco Nexus N3K-C3048TP-1GE 48 Port Switch w/ Dual Power - Same Day Shipping

$85.95



QSFP-40G-SR-BD Cisco 40GBASE-SR-BiDi, duplex MMF QSFP+ Modules 10-2945-02  picture

QSFP-40G-SR-BD Cisco 40GBASE-SR-BiDi, duplex MMF QSFP+ Modules 10-2945-02

$27.99



Cisco Nexus N3K-C3172PQ-XL 48P 10GbE SFP+ 4P QSFP+ Switch N3K-C3172PQ-XL-F picture

Cisco Nexus N3K-C3172PQ-XL 48P 10GbE SFP+ 4P QSFP+ Switch N3K-C3172PQ-XL-F

$229.00



Cisco C9300-48U-A 48-Port Gig UPoE Network Advantage Switch -Same Day Shipping picture

Cisco C9300-48U-A 48-Port Gig UPoE Network Advantage Switch -Same Day Shipping

$859.95