Reply
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
4.1.8-T5 Security issue - guest access bug [FIXED]
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-07-31
05:59 PM
2011-07-31
05:59 PM
4.1.8-T5 Security issue - guest access bug [FIXED]
There is a guest access security bug on 4.1.8-T5.
I just updated an NV+ to 4.1.8-T5 and all three of my shares with AFP enabled showed guest access as enabled under Shares > Share Listing in Frontview.
Two of my shares which I had set with read/write set as the default access for the share over AFP, the guest user was able to access over AFP.
The share which I had default access set to disabled, but had a write-enabled user for, the guest user was unable to access (well at least it didn't show in the list of AFP shares).
Whilst not as severe as the issue on 4.2.18 for x86 (I think), this is still a security bug.
I just updated an NV+ to 4.1.8-T5 and all three of my shares with AFP enabled showed guest access as enabled under Shares > Share Listing in Frontview.
Two of my shares which I had set with read/write set as the default access for the share over AFP, the guest user was able to access over AFP.
The share which I had default access set to disabled, but had a write-enabled user for, the guest user was unable to access (well at least it didn't show in the list of AFP shares).
Whilst not as severe as the issue on 4.2.18 for x86 (I think), this is still a security bug.
Message 1 of 6
Labels:
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-08-01
10:38 AM
2011-08-01
10:38 AM
Re: 4.1.8-T5 Security issue - guest access bug
Will take a look..
Message 2 of 6
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-08-01
01:37 PM
2011-08-01
01:37 PM
Re: 4.1.8-T5 Security issue - guest access bug
Will be fix in next release.. thanks for reporting the issue.
Message 3 of 6
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-08-02
12:35 PM
2011-08-02
12:35 PM
Re: 4.1.8-T5 Security issue - guest access bug
4.1.8-T9 is available (promising to fix the bug)
Message 4 of 6
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-08-02
04:01 PM
2011-08-02
04:01 PM
Re: 4.1.8-T5 Security issue - guest access bug
I'll have to update my NV+ with AFP enabled now to confirm this is fixed. It'll take me about half an hour to download it there as I have a slow internet connection there.
Message 5 of 6
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2011-08-02
05:14 PM
2011-08-02
05:14 PM
Re: 4.1.8-T5 Security issue - guest access bug [FIXED]
Just checked and it's fixed in T9.
Message 6 of 6