RE: Windows Firewall Has A Backdoor

To: "'Jay Calvert'" <jcalvert@xxxxxxxxxxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: RE: Windows Firewall Has A Backdoor
From: "Chris Goodwin" <chris.goodwin@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 21 Feb 2005 13:53:52 -0500
Importance: Normal
In-reply-to: <20050219205250.11353.qmail@xxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Reply-to: <chris.goodwin@xxxxxxxxxxxxxxxxxxx>

Does anyone know if this key is monitored by the MS Antispyware resident
protection?


Chris Goodwin


-----Original Message-----
From: Jay Calvert [mailto:jcalvert@xxxxxxxxxxxxxxxxxxxx]
Sent: Saturday, February 19, 2005 3:53 PM
To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Windows Firewall Has A Backdoor




By adding a new key to the registry in
HKEY_LOCAL_MACHINE/SYSTEM/Services/SharedAccess/Parameters/FirewallPolicy/St
andardProfile/AuthorizedApplications/List you can circumvent the whole
purpose of the firewall with out the users interaction or knowledge.
Spyware / Adware manufacturer's are already do this.

More information and a little rant at:
http://habaneronetworks.com/viewArticle.php?ID=144


--
Jay Calvert
HabaneroNetworks.com

References:
- Windows Firewall Has A Backdoor
  - From: Jay Calvert

Prev by Date: iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability
Next by Date: iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability
Previous by thread: Re: Windows Firewall Has A Backdoor
Next by thread: Re: Windows Firewall Has A Backdoor
Index(es):
- Date
- Thread