Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 293512 - Last Review: July 6, 2007 - Revision: 2.4
Description of FTP and anonymous access with the server extensions installed
This article was previously published under Q293512
When you configure a Web site with the server extensions,
security will be managed through the server extensions. There are several
places in the Web site where the anonymous account or some groups with equally
broad membership will have write access. Under normal circumstances, this is
not a problem. This is because the only way to write to the site is by using
FrontPage, which forces authentication before access is allowed. When you also
have an FTP site configured to use the same file path and to allow anonymous
access to the FTP site, the situation changes.
If both anonymous and write access are allowed to the FTP
site, those folders to which the anonymous account has write access can be used
as a storage location, without the site owner having knowledge of this.
Sensitive files, such as the Global.asa file, which can contain passwords in
clear text, will be exposed.
NOTE: This is not a security problem with the server extensions. They
are not designed to work in this type of environment.
For a list of permissions settings for the directories and
files that contain the FrontPage Server Extensions, visit the following
Microsoft Web sites:
APPLIES TO
- Microsoft FrontPage 2002 Server Extensions
- Microsoft SharePoint Team Services
- Microsoft FrontPage 2000 Server Extensions
| kbftp kbsecurity kbconfig kbinfo kbhowto KB293512 |
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please