Can I ask your opinions, be it based on exprience or knowledge, on the potential impact of a malicious insider compromising one of our servers. Say for example we have 2 servers, with win2003 server as the OS, one runs an Oracle DB, the other IIS. If someone compromised a windows account with admin priveleges, could you give me a few examples on what this insider could potentially do maliciously against that server - network - data - applications etc? I appreciate the server should be protected by strong passwords on only the neccesarty amount of servers, but Im doing some risk analysis so could do with a steer on the risk were a server to be compromised.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
with admin privileges gone you don't own the machine any more and the risk analysis could say this: should the malicious insider choose to do so, he could fabricate an intricate ring of nazi child pronographers out of the company board/management and have them all locked up for a long time.
thats how f**ked you'd be. so, please, take security seriously.
What can attackers do with admin privileges? Anything and everything, game over, case closed, their imagination is the limit. They can access any data that is or will be there, destroy it or alter it. They can use any resources you have available and carry on attacks towards everything the server can connect to.
Business Accounts
Answer for Membership
by: TolomirPosted on 2009-09-09 at 06:56:24ID: 25291318
with admin privileges he has full control over the oracle server
execute "sqlplus / as sysdba" on the command shell allows anything on the oracle DB (no need to know the oracle password)
---
The IIS server can also be managed by the administrator, allowing all kind of manipulation from spam provider to trojan distributor, you name it.
---
Tolomir