INFO: Security Issues with RAD Remote Development Support

• Microsoft Visual InterDev, version 6.0
• Microsoft Visual Studio 6.0
• Microsoft Windows NT 4.0

SUMMARY

Visual InterDev RAD Remote Development Support can be installed as an option of the Microsoft Windows NT 4.0 Option Pack. This option is automatically installed if the Windows NT 4.0 Option Pack is installed as a part of the Visual Studio 6.0 install process.

Visual InterDev RAD Remote Development Support provides the ability for developers to install and register components on a server from a remote Visual Studio 6.0 client. While this function is both convenient and useful, it creates the potential for a security breach on the server where it is enabled.

Currently, Windows NT Administrators can allow developers access to a server while restricting them from the ability to install and register components. Installing Visual InterDev RAD Remote Development Support will give any Visual Studio 6.0 developer with "Author" permissions the ability to install and register a component (from a Visual Studio 6.0 client) that could potentially be harmful to the server and/or breach server security.

Windows NT Administrators should be aware of and consider these implications when enabling Visual InterDev RAD Remote Development Support.

MORE INFORMATION

For more information on Visual InterDev RAD remote deployment support, see the following section of the Visual Interdev Documentation:

Visual InterDev 6.0 Documentation: Using Visual InterDev; Building Integrated Solutions; Integration Tasks; Deploying and Maintaining Web Applications; Deploying an Integrated Web Solution

Information on security and Microsoft products can be found at:

http://www.microsoft.com/security

Additional query words:

Keywords : kbNTOS400 kbVisID600 kbGrpASP
Version : WINDOWS:6.0; winnt:4.0
Platform : WINDOWS winnt
Issue type : kbinfo