Security Basics mailing list archives
Re: C$ Default Share Security Issue
From: Ansgar Wiechers <bugtraq () planetcobalt net>
Date: Mon, 18 Jul 2011 18:49:57 +0200
On 2011-07-18 ??????? ?????? wrote:
Wouldn't it be even better than watching just closing the share with a script?! You could include it in a distribution of your own To delete the share (net share C$ /del) and that's it.
Only that C$ is an administrative share that is automatically re-shared every time the server service (re-)starts. To disable administrative shares you have to set the DWORD value AutoShareWks in the registry key [HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters] to 0. However, I strongly recommend against disabling administrative shares, because that way you'd seriously cripple your own ability to remotely manage the client. Besides, they're only accessible by administrators anyway. As for monitoring access to administrative shares: that's what SACLs are for. <http://technet.microsoft.com/en-us/library/cc961813.aspx>
On a windows vista or 7 environment it would be awkward to disable UAC to Let the script go ('cause it won't run even with the runas command) because of other implications e.g. other users would be able To install programs but in a domain controlled space it wouldn't be a problem either way.
On Windows 7 you should disable UAC, because if you're practicing LUA (which you should) it will only gain you a lot hassle, but no additional security at all. Regards Ansgar Wiechers -- "All vulnerabilities deserve a public fear period prior to patches becoming available." --Jason Coombs on Bugtraq ------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- C$ Default Share Security Issue HKECIC HKECIC (Jul 14)
- Re: C$ Default Share Security Issue Nagareshwar Talekar (Jul 14)
- Re: C$ Default Share Security Issue gold flake (Jul 15)
- RE: C$ Default Share Security Issue Μονέδας Μιχαήλ (Jul 18)
- Re: C$ Default Share Security Issue Nagareshwar Talekar (Jul 18)
- Re: C$ Default Share Security Issue Ansgar Wiechers (Jul 18)
- Re: C$ Default Share Security Issue gold flake (Jul 15)
- Re: C$ Default Share Security Issue Nagareshwar Talekar (Jul 14)
- RE: C$ Default Share Security Issue IT_H_Security (Jul 18)
- Re: C$ Default Share Security Issue Matthew Harlum (Jul 19)
- Re: C$ Default Share Security Issue HKECIC HKECIC (Jul 25)