WHMurray@DOCKMASTER.NCSC.MIL (07/27/90)
It is clear that a virus executed on a net connected workstation can infect the workstation. It is clear that a virus executed on a server can infect the both the server and the attached workstations. It is clear that a virus executed on a workstation with privileges to write to programs on the server can infect those programs and thus other workstations. It is UNLIKELY that a virus executing on the workstation BUT without privileges to write to the server can infect the server. Jon David seems to suggest that this happened (otherwise why would this be interesting). It sounds as though he has evidence that files on the server were infected. It sounds as though netware was infected. Since no one on a workstation should have the privilege of writing to netware, this suggests that the virus may have executed on the server. What evidence is there that the server was infected by a virus executing on a workstation and without the privilege to write to the server? William Hugh Murray, Executive Consultant, Information System Security 21 Locust Avenue, Suite 2D, New Canaan, Connecticut 06840 203 966 4769, WHMurray at DOCKMASTER.NCSC.MIL [Ed. See followup below.]