Remember, emcrsh is using a Telnet compatible interface but it isn't a 
Telnet shell like rsh for example. Something like emcrsh isn't going to 
allow anyone to execute code on your machine or read your user or root 
passwords.

If you have a port open then a hacker can try accessing it. The worst 
they can do is guess at the password needed to log into emcrsh, assuming 
they manage to guess what emcrsh does. They could then interfere with 
operation of the machine.

Just having a port open on your machine doesn't automatically allow 
others to scan any data going through that connection. The only way 
hackers can do that is if they can intercept the packets as the travel 
between the remote machine and emcrsh. If you are using emcrsh via a 
local network (a much more likely scenario), outside hackers won't be 
able to read your password or anything else. Most routers out of the box 
only allow access to a limited number of ports. If you are using emc 
locally then simply don't enable that port in your router/firewall.

A much more likely scenario is a malicious user trying to mess around 
with a CNC machine that is on the same local network. However if you are 
running a business big enough to have malicious users on it's network 
you should already have security protocols in place.

Les


>
> The problem is leaving the telnet port open. I may be wrong here, but I
> believe, all a hacker needs is an IP address that has telnet open, then
> scan the port until someone logs in and records the password. If root
> logs in, your dead. Script kitties can use a script to automate this, so
> all they need to do is start it, and wait. I get port and password
> scanned almost daily.
> -----------
>   


------------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It is the best place to buy or sell services for
just about anything Open Source.
http://p.sf.net/sfu/Xq1LFB
_______________________________________________
Emc-users mailing list
Emc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/emc-users

Reply via email to