DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  shade

SYSTEMS AFFECTED

  Win NT
  

PROBLEM


    Shade is the  first software  package to  provide  on the fly disk
    encryption for  Windows NT.   Shade uses  MDC/SHA -  160 bit block
    encryption algorithm.

    Joseph Grey found some  vulnerabilities with this package.  If you
    have a mounted Shade volume and "Close all programs and log on  as
    a different user", the Shade  volume is still mounted. It  doesn't
    matter if you  log back on as  the same or a  different user.  The
    volume  is  still  accessable.  If  you  do a restart instead, the
    volume is unmounted properly.



EXPLOIT

  

SOLUTION


    Works are on  a version 1.1  that will have  added functionallity.
    This is supposed to be available at the end of April 1997.