Additional protections in each Secured product treat vulnerabilities specific to each application. Sun Microsystems Inc. Ultra 1 server running Solaris 2.6. These products do not modify the Unix kernel. Before installing Secured for Web or Secured for Email, we could gain access to the root through a Telnet session using a simple buffer overflow technique. However, after installing the Secured software for these applications, the same hack attempt failed.
Administrators log in using their own user name and password, then switch to the root account.
Because Secured searches back to the root user's original log-in user name to identify the person, a hacker must break into two difficult accounts to get around the Secured system. Secured's extra authentication only applies to certain system calls, not ordinary reads and writes. Secured also strengthens Web, Sendmail and firewall applications by insulating related program files against alteration. For example, this feature stops hackers from embarrassing companies by altering corporate Web content. However, there are only general descriptions of this function in the documentation.