DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  shade


SYSTEMS AFFECTED

  Win NT

  

PROBLEM


    Shade is the  first software  package to  provide  on the fly disk

    encryption for  Windows NT.   Shade uses  MDC/SHA -  160 bit block

    encryption algorithm.



    Joseph Grey found some  vulnerabilities with this package.  If you

    have a mounted Shade volume and "Close all programs and log on  as

    a different user", the Shade  volume is still mounted. It  doesn't

    matter if you  log back on as  the same or a  different user.  The

    volume  is  still  accessable.  If  you  do a restart instead, the

    volume is unmounted properly.





EXPLOIT

  

SOLUTION


    Works are on  a version 1.1  that will have  added functionallity.

    This is supposed to be available at the end of April 1997.