AplusWebMaster
Topic Starter
FYI…
- http://isc.sans.org/diary.php?storyid=1720
Last Updated: 2006-09-21 16:26:38 UTC
"…Once again the folks at NISCC have posted info on a beauty. Their NISCC Vulnerability Advisory 693564/NISCC/FOLDERSHARE - Security Implications of the FolderShare Program* details huge vulnerabilities (https tunnel, EFS bypassing, and more) in FolderShare, an "add-in tool for Microsoft Desktop Search" which enables "remote access to files stored on Windows and Mac OS X based computers.".
MS's KB "Best practices and security issues to consider when you use FolderShare**" is weak, it's only useful recommendation is;
"you can effectively block outgoing traffic to FolderShare. To permanently block the FolderShare satellite from running in a particular environment, block access to the following host name on port TCP/443: redir1.foldershare.com "…"
* http://www.uniras.gov.uk/niscc/docs/br-200…35.html?lang=en
** http://support.microsoft.com/kb/925077
Last Review: September 19, 2006
Revision: 1.1
"…FolderShare is a Windows Live service and an add-in for Microsoft Desktop Search. If you use FolderShare incorrectly, you might unintentionally disclose information on a network…"
- http://isc.sans.org/diary.php?storyid=1720
Last Updated: 2006-09-21 16:26:38 UTC
"…Once again the folks at NISCC have posted info on a beauty. Their NISCC Vulnerability Advisory 693564/NISCC/FOLDERSHARE - Security Implications of the FolderShare Program* details huge vulnerabilities (https tunnel, EFS bypassing, and more) in FolderShare, an "add-in tool for Microsoft Desktop Search" which enables "remote access to files stored on Windows and Mac OS X based computers.".
MS's KB "Best practices and security issues to consider when you use FolderShare**" is weak, it's only useful recommendation is;
"you can effectively block outgoing traffic to FolderShare. To permanently block the FolderShare satellite from running in a particular environment, block access to the following host name on port TCP/443: redir1.foldershare.com "…"
* http://www.uniras.gov.uk/niscc/docs/br-200…35.html?lang=en
** http://support.microsoft.com/kb/925077
Last Review: September 19, 2006
Revision: 1.1
"…FolderShare is a Windows Live service and an add-in for Microsoft Desktop Search. If you use FolderShare incorrectly, you might unintentionally disclose information on a network…"