DATE: COMMAND SOURCE: AUTHOR: shade SYSTEMS AFFECTED Win NT PROBLEM Shade is the first software package to provide on the fly disk encryption for Windows NT. Shade uses MDC/SHA - 160 bit block encryption algorithm. Joseph Grey found some vulnerabilities with this package. If you have a mounted Shade volume and "Close all programs and log on as a different user", the Shade volume is still mounted. It doesn't matter if you log back on as the same or a different user. The volume is still accessable. If you do a restart instead, the volume is unmounted properly. EXPLOIT SOLUTION Works are on a version 1.1 that will have added functionallity. This is supposed to be available at the end of April 1997.