IIS Server Security - Re: Is it dangerous to use a local administrator account for anonymous access to a sec

Author

Re: Is it dangerous to use a local administrator account for anonymous access to a sec

Paulaner

2007-04-17, 1:20 pm

Well said, thank you.

On Tue, 17 Apr 2007 11:31:16 +1000, "Ken Schaefer"
<kenREMOVE@THISadOpenStatic.com> wrote:

>The issue here is that if anyone can, in any way, subvert the application,
>then they will have complete control over the machine (for example via SQL
>injection, cross-site scripting vulnerability, session replay attack etc).
>From there, they will almost certainly be able to, eventually, subvert the
>entire domain.
>
>Cheers
>Ken
>
>