[ANNOUNCE] WaveLock 1.0 Released

From: Marco Peretti (marco2@securewave.com)
Date: 01/27/03

  • Next message: Mandrake Linux Security Team: "MDKSA-2003:011 - Updated fetchmail packages fix remote exploit vulnerability" 
    From: "Marco Peretti" <marco2@securewave.com>
To: bugtraq@securityfocus.com
Date: Mon, 27 Jan 2003 22:06:33 +0100

    SecureWave announces the release and immediate availability of
    WaveLock 1.0, a free utility that prevents the use of wireless
    network adapters recognized by Windows 2000 and Windows XP.

    Corporate network infrastructures are usually carefully secured
    against attacks from the outside, and abuse from the inside. Yet all
    these precautions can be defeated if a second network, parallel to
    the corporate one, can be created. Such a parallel network is easily
    established using a wireless network adapter (also Wireless LAN
    "WLAN" cards). Windows 2000 and Windows XP come with many
    pre-installed wireless network adapters drivers. Anyone can insert
    one of the wireless network adapters supported by Windows and have it
    working in seconds. Installation does not require administrative
    privilege as drivers are pre-installed and its use can hardly be
    traced by network administrators.

    Without restricting the ability to install wireless network adapters,
    organizations expose themselves to the risk of disclosing sensitive
    data. Moreover, wireless network adapters also open computers to the
    introduction of malicious software, effectively making an end-run
    around the expensive and carefully maintained firewall that is
    supposed to prevent just that malicious software from reaching the
    network.

    While most development effort to date have been concentrated on
    securing wireless data transfers, little attention has been paid to
    the means of controlling and authorizing the wireless network adapter
    use in order to avoid related network security breaches. WaveLock
    assists in enforcing security policies by blocking access to wireless
    network adapters on any or all laptops, making it harder to
    circumvent firewalls, filters, proxies, and other required safeguards.

    WaveLock will detect any attempt to install wireless network adapters
    and will prevent corresponding drivers from loading, rendering the
    adapter inoperative.

    By preventing unauthorized usage of wireless network adapters,
    WaveLock is a welcome addition to a layered defense strategy … and it
    is free!

    For more information, and to download WaveLock, got to
    http://securewave.com/products/free_utilities/wavelock.html.

    Relevant Pages

    • Re: Security templates and settings in Windows XP
      ... The UID will change each time you bind and unbind the QoS Packet Scheduler from the interface. ... the appropriate binding is created in Network Adapters and given the NetCfgInstanceID for the interface referenced in the PSched parameters. ... Security templates and settings in Windows XP ...
      (Focus-Microsoft)
    • Re: Home Networking
      ... I can see why you're not getting much connectivity. ... no network adapters or that your network adapters ... OS= Windows XP Home Edition SP1 ... Firewall= Windows Firewall ...
      (microsoft.public.win2000.networking)
    • Re: Three NDIS Active sessions
      ... WinCE will support 3 network adapters at a time. ... PASSTHRU sample, which is too directly copy-pasted from Windows NT sample and ... Maxim Shatskih, Windows DDK MVP ... "Ashish" wrote in message ...
      (microsoft.public.windowsce.platbuilder)
    • Re: Need to list the Physical Network Adapters installed on a System
      ... There are perhaps shortcuts for specific systems, but if you want to be able to detect on Windows 2000 and Windows XP including Norton Ghost ... I think it's because the boxes were built with Norton Ghost and they blasted every possible NIC into the registry regardless of whether it was in the machine or not! ... If I query the WMI class Win32_NetworkAdapter, it returns all the adapters including the Virtual network adapters. ... But searching for specific strings like PCMCIA/PCI/ISA/EISA will be difficult as we need to list all possible strings possibel for PNP Device ID for different network adapters. ...
      (microsoft.public.win32.programmer.wmi)