[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Shares as entry points

Posted on 2012-03-28
3
Medium Priority
?
339 Views
Last Modified: 2012-03-29
I found http://technet.microsoft.com/en-us/library/cc526440.aspx

And it says


"Remove All Unnecessary File Shares
Remove all unnecessary file shares on the system to prevent possible information disclosure and to prevent malicious users from using the shares as an entry to the local system"

I am aware that shares can be "shared" to groups like everyone/domain users etc and ift theres senstivie data resident then that can be accessed.

But it hints at shares as an entry point:


"from using the shares as an entry to the local system"

To perhaps gain access to admin areas of the system?

So is that possible, or theoretical? A non admin share shared to the everyone group could actually open up the server to compromise so the user can get access to the admin area of the server?
0
Comment
Question by:pma111
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 5

Accepted Solution

by:
9660kel earned 2000 total points
ID: 37776104
It's possible, but it would require access to the server, (authenticated user) and some fairly sophisticated understanding of the file system and some fancy command line and batch files.

Not very likely, but it's generally better to assign permissions to groups than just everyone. Also, just because they have access to the share, doesn't mean they have any permissions to the folders and files contained in the share, that's separate. (the security tab)

For general access, I use the domain users group.
0
 
LVL 3

Author Comment

by:pma111
ID: 37776120
Ok thanks for the reply

When you say "access to the server", hwo do you mean. SAy for example

\\server\share\dir\file.xls (shared to everyone - so a random user navigates to that file/folder), does that quantify as access to the server?
0
 
LVL 5

Expert Comment

by:9660kel
ID: 37776140
They would need a user account that has access to the share. Essentially it COULD make it easier to escalate privileges on the server, although with the type of skills needed, they could probably do that anyway, it just leaves fewer doors open to use the domain users group.

Really the main problem with open shares is virus infections spreading via the share.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ransomware, the malware that locks down its victim’s files until they pay up, has always been a frustrating issue to deal with. However, a recent mobile ransomware will make the issue a little more personal… by sharing the victim’s mobile browsing h…
This article covers the basics of data encryption, what it is, how it works, and why it's important. If you've ever wondered what goes on when you "encrypt" data, you can look here to build a good foundation for your personal learning.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question