KnowledgeBase Archive

An Archive of Early Microsoft KnowledgeBase Articles

View on GitHub

Q166336: FTP Users Able to List Files Without Correct NTFS Permissions

Article: Q166336
Product(s): Microsoft Windows NT
Version(s): WinNT:3.51
Operating System(s): 
Keyword(s): kbnetwork
Last Modified: 08-AUG-2001

-------------------------------------------------------------------------------
The information in this article applies to:

- Microsoft Windows NT Workstation version 3.51 
- Microsoft Windows NT Server version 3.51 
-------------------------------------------------------------------------------

SYMPTOMS
========

File Transfer Protocol (FTP) clients are allowed to view files and directories
on an NTFS partition, although they have not been given this right through the
file and directory permissions. However, if these clients try to view the files
through a Microsoft network connection, they will receive the error:

  You do not have permission to access this directory.

CAUSE
=====

As long as a user has EXECUTE (X) permission on a directory and is a member of a
group that has execute permission, or as long as that user has explicitly been
given the user right to Back up files and directories, the user will be able to
list the files and subdirectories in that directory. This will occur even if the
user has been granted No Access to files in that directory.

For example:

If the user has been given as little access as: Special Access (X)(None), that
user will be able to list the files and subdirectories in that directory. That
user will still, however, get an "access is denied" error when trying to
manipulate the files and subdirectories.

RESOLUTION
==========

Do not give FTP users the BACK UP FILES AND DIRECTORIES user right, if it is
important that files and subdirectories be hidden through permissions.

STATUS
======

Microsoft has confirmed this to be a problem in Windows NT version 3.51. We are
researching this problem and will post new information here in the Microsoft
Knowledge Base as it becomes available.

Additional query words: anonymous server file permission see special read write change delete take ownership contents

======================================================================
Keywords          : kbnetwork 
Technology        : kbWinNTsearch kbWinNTWsearch kbWinNT351search kbWinNTW351search kbWinNTW351 kbWinNTSsearch kbWinNTS351 kbWinNTS351search
Version           : WinNT:3.51
Issue type        : kbbug

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.