‘Database Servers on Windows XP – Unintended Consequences of Simple File Sharing’
‘The information has been provided by David Litchfield.
The original article can be found at: http://www.ngssoftware.com/papers/database-on-xp.pdf‘
‘What is Simple File Sharing?
Before Windows XP, to gain access to a shared file on a Windows NT or 2000 box, you needed to have a valid user ID and password – that is assuming you weren’t exploiting some other means to get access. This made it difficult for people out there that wanted to share files out to the general public, so with Windows XP, Microsoft introduced Simple File Sharing. With Simple File Sharing all access is granted via the guest account. In this way, if a user is sharing music or pictures from their XP system at home, they don’t have to give out a user ID and password to everyone – people wanting access are simple given access through the guest account.
For those that want to share files but not with the world and their dog, these people could just use the classic way of sharing files. By far and above the most popular way of sharing files on Windows XP is with Simple File Sharing. As we’ll see shortly, this has a significant impact on the security of a computer if a database server has been installed. But before exploring this let’s look at the differences between simple and normal file sharing.
To read more: http://www.ngssoftware.com/papers/database-on-xp.pdf‘