Description of FTP and anonymous access with the server extensions installed

Article translations Article translations
Article ID: 293512 - View products that this article applies to.
This article was previously published under Q293512
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SUMMARY

When you configure a Web site with the server extensions, security will be managed through the server extensions. There are several places in the Web site where the anonymous account or some groups with equally broad membership will have write access. Under normal circumstances, this is not a problem. This is because the only way to write to the site is by using FrontPage, which forces authentication before access is allowed. When you also have an FTP site configured to use the same file path and to allow anonymous access to the FTP site, the situation changes.

MORE INFORMATION

If both anonymous and write access are allowed to the FTP site, those folders to which the anonymous account has write access can be used as a storage location, without the site owner having knowledge of this. Sensitive files, such as the Global.asa file, which can contain passwords in clear text, will be exposed.

NOTE: This is not a security problem with the server extensions. They are not designed to work in this type of environment.

REFERENCES

For a list of permissions settings for the directories and files that contain the FrontPage Server Extensions, visit the following Microsoft Web sites:
http://office.microsoft.com/en-us/ork2000/HA011383231033.aspx

http://www.microsoft.com/technet/archive/office/office97/reskit/fp98serk/A_UNPERM.mspx

Properties

Article ID: 293512 - Last Review: February 27, 2014 - Revision: 2.4
APPLIES TO
  • Microsoft FrontPage 2002 Server Extensions
  • Microsoft SharePoint Team Services
  • Microsoft FrontPage 2000 Server Extensions
Keywords: 
kbnosurvey kbarchive kbftp kbsecurity kbconfig kbinfo kbhowto KB293512

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com