RE: Windows Firewall Has A Backdoor

From: Chris Goodwin (chris.goodwin_at_epicenterprises.com)
Date: 02/21/05

  • Next message: iDEFENSE Labs: "iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities" 
    To: "'Jay Calvert'" <jcalvert@habaneronetworks.com>, <bugtraq@securityfocus.com>
Date: Mon, 21 Feb 2005 13:53:52 -0500

    Does anyone know if this key is monitored by the MS Antispyware resident
    protection?

    Chris Goodwin

    -----Original Message-----
    From: Jay Calvert [mailto:jcalvert@habaneronetworks.com]
    Sent: Saturday, February 19, 2005 3:53 PM
    To: bugtraq@securityfocus.com
    Subject: Windows Firewall Has A Backdoor

    By adding a new key to the registry in
    HKEY_LOCAL_MACHINE/SYSTEM/Services/SharedAccess/Parameters/FirewallPolicy/St
    andardProfile/AuthorizedApplications/List you can circumvent the whole
    purpose of the firewall with out the users interaction or knowledge.
    Spyware / Adware manufacturer's are already do this.

    More information and a little rant at:
    http://habaneronetworks.com/viewArticle.php?ID=144 

    --
Jay Calvert
HabaneroNetworks.com
  • Next message: iDEFENSE Labs: "iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities"