 |
 | Home | Contact Us | FAQ | Search & Site Map | Link to Us |
 | Sign In | Join | Other 45 Sites in Network |
Windows Forum / Windows XP / Security and Administration / July 2006The security bug with NTFS file system
The operating system I'm using is Windows XP Professional (Chinese Simplified) (5.1.2600.2180, xpsp_sp2_gdr, 050301-1519, up to date) (VLK Edition). The system is installed in the first partition of my only hard disk, and the file system is NTFS. One day I tried to visit the System Volume Information folder of partition C, I hoped to see the dialog box saying "Access is denied." But I just was able to visit the folder! Then I checked the properties of the folder, and the Security settings showed that only SYSTEM had the permission to read and write in the folder. During this period of time I was logging on as Administrator (the default account of Windows XP). I tried to delete the files in the folder, and I just made it. Then I logged off and logged on again. This time I lost the permission to read the folder. I'm sorry I'm not able to reproduce the problem, but I'm willing to provide more information in the further contact. I think this is a serious bug in Windows XP and/or other operating systems, and Microsoft must solve this problem very soon. Maybe I haven't provided enough information of this problem, and I'm willing to provide more information later on. I'd like to hear from Microsoft soon. Why is it a serious problem that the administrator can delete a folder? The administrator can do anything he wants to on the computer. Unless you can reproduce the problem it is hard for anyone to explain why you, as an administrator, were able to delete files in that folder. Important information would be what, if any, special permissions were configured in the advanced page of files in that folder that may have had explicit permissions do to some access control list configuration operation you did at one time and now the "new" files have inherited permissions. Steve > The operating system I'm using is Windows XP Professional (Chinese > Simplified) (5.1.2600.2180, xpsp_sp2_gdr, 050301-1519, up to date) (VLK [quoted text clipped - 19 lines] > to provide more information later on. I'd like to hear from Microsoft > soon. No, in the Security settings, Administrators just had no permission to access the folder. It means that one can access a folder which he or she has no permission to access in NTFS partition. Isn't it a serious problem?  SignaturePractice makes wonder! “Steven L Umbach”编写： > Why is it a serious problem that the administrator can delete a folder? The > administrator can do anything he wants to on the computer. Unless you can [quoted text clipped - 30 lines] > > to provide more information later on. I'd like to hear from Microsoft > > soon. Maybe you were running as system?? Administrators can do that and it would explain why you could not access it when you logged of and logged on again. I agree it would be a serious problem if regular users could access folders/files that they had no permissions to on a clean operating system with default security settings. Steve > No, in the Security settings, Administrators just had no permission to > access [quoted text clipped - 43 lines] >> > to provide more information later on. I'd like to hear from Microsoft >> > soon. Maybe, but even so, there is a security bug. SignaturePractice makes wonder! “Steven L Umbach”编写： > Maybe you were running as system?? Administrators can do that and it would > explain why you could not access it when you logged of and logged on again. [quoted text clipped - 51 lines] > >> > to provide more information later on. I'd like to hear from Microsoft > >> > soon. No Microsoft worker replies me? SignaturePractice makes wonder! “dfrg_msc”编写： > The operating system I'm using is Windows XP Professional (Chinese > Simplified) (5.1.2600.2180, xpsp_sp2_gdr, 050301-1519, up to date) (VLK [quoted text clipped - 14 lines] > Maybe I haven't provided enough information of this problem, and I'm willing > to provide more information later on. I'd like to hear from Microsoft soon. I hope that a Microsoft worker can reply me. Thanks. SignaturePractice makes wonder! I have to turn to Microsoft officers for help. SignaturePractice makes wonder! “dfrg_msc”wrote： > The operating system I'm using is Windows XP Professional (Chinese > Simplified) (5.1.2600.2180, xpsp_sp2_gdr, 050301-1519, up to date) (VLK [quoted text clipped - 14 lines] > Maybe I haven't provided enough information of this problem, and I'm willing > to provide more information later on. I'd like to hear from Microsoft soon. This is a public forum - not Microsoft staffed support. You can always contact them if you suspect a bug or security vulnerability. Be sure to include specifics about system configuration, patch level, firewall being used, results from last malware scan, is it consistently reproducible, etc. They may want a dump of msinfo32. Steve http://support.microsoft.com/gp/contactbug >I have to turn to Microsoft officers for help. >> The operating system I'm using is Windows XP Professional (Chinese [quoted text clipped - 23 lines] >> to provide more information later on. I'd like to hear from Microsoft >> soon. Thank you very much. SignaturePractice makes wonder! “Steven L Umbach”编写： > This is a public forum - not Microsoft staffed support. You can always > contact them if you suspect a bug or security vulnerability. Be sure to [quoted text clipped - 33 lines] > >> to provide more information later on. I'd like to hear from Microsoft > >> soon. |
Reply to this Message |
 Sign In
 Join
 My Latest Posts My Monitored Threads My Blog My Photo Gallery My Profile My Homepage Start New Thread Enable EMail Alerts Rate this Thread
|
©2008 Advenet LLC Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.