Broken security on one portal

From: Rkelly (Rkelly_at_discussions.microsoft.com)
Date: 03/11/05


Date: Fri, 11 Mar 2005 10:13:03 -0800

Panic time here,

Not sure when this happened but one of the portals we are working to setup
suddenly has no security. I stripped the security all the way down to only
myself and it seems like all users can perform all tasks. I checked the IIS
setup and anon is off. I was doing some modifications to the portal home in
frontpage but after seeing this I overwrote the default page with one from
another site to try to fix it.

Man I hope I do not have to recreate this portal.

What contol works or checks security?

Thanks,
Rkelly



Relevant Pages

  • [NT] Multiple DUWare Vulnerabilities
    ... Get your security news from a reliable source. ... upload a script, ... If the item you add requires approval by the administrator, ... executed in the browsers of the portals visitors. ...
    (Securiteam)
  • Multiple DUWare Product Vulnerabilities
    ... of web security such as, but not limited to: ... DUPortal you can upload a script, ... If the item you add requires approval by the administrator, ... browsers of the portals visitors. ...
    (Bugtraq)
  • Re: Canalplan - WiFi hotspot feature
    ... There are others that are just not secured and, in my opinion, if they don't batten down their portals with at least minimal security measures then they are being somewhat negligent about their own security arrangements and deserve to be used. ... As one who has a wireless system at home I have made sure that the link is secured against unauthorised users. ...
    (uk.rec.waterways)
  • Re: Best practices in case of multiple portal entities
    ... portals, among other lots of other very useful topics. ... Microsoft MVP - Sharepoint Portal Server ... > Can someone please provide me details on what are the best practices in ... > the infrastructure be setup to ensure security. ...
    (microsoft.public.sharepoint.portalserver)
  • RE: A question about a basic security setup...
    ... A question about a basic security setup... ... > I was thinking of running iptables on the dual homed host, ... What you are looking for here, is an "application proxy" type firewall. ...
    (Security-Basics)