SharePoint 2007 是否使用 FrontPage 扩展？
在我的 WSS 3.0 站点上执行了自动安全扫描，并根据 FrontPage 扩展的明显存在发出了一些警告。 也就是说，它通过将这些位置附加到网站的主 URL 来找到 /_vti_pvt/service.cnf、/_vti_pvt/services.cnf 和 /_vti_bin/_vti_aut/author.dll 等文件。 这些显然与 FrontPage Extensions 有关。 我已确认这些文件存在并且可以通过网络访问。
这些文件到底有什么用？ 它们确实与 FrontPage Extensions 有关吗（FrontPage Extensions 过去显然存在许多安全缺陷）？ 它们可以以某种方式被删除或禁用吗？
更新： 我已删除了 IIS 中 SharePoint 网站下这些目录的读取权限。 他们不再通过网络提供服务，但该网站似乎运行正常。 因此，如果有人从这些文件中发现明显的安全漏洞，一个可能的选择是删除读取权限。
我还没有尝试与 SharePoint 设计器连接。
An automated security scan was performed on my WSS 3.0 site and it came up with some warnings based on the apparent presence of FrontPage Extensions. Namely it found files like /_vti_pvt/service.cnf, /_vti_pvt/services.cnf, and /_vti_bin/_vti_aut/author.dll by appending those locations to the site's main URL over the web. These are apparently related to FrontPage Extensions. I have confirmed that the files exist and can be accessed over the web.
What exactly are these files for? Are they, indeed, related to FrontPage Extensions (which apparently has suffered from many security shortcomings in the past)? Can they be removed or disabled somehow?
Update:
I have removed read permissions to those directories under my SharePoint web site in IIS. They no longer serve over the web, but the site seems to function normally. So if anyone has an apparent security vulnerability from these files, a possible option is to remove the read permissions.
I have not tried to connect with SharePoint designer.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
我认为您所看到的是支持SharePoint 设计器的文件，它本质上是从Frontpage 发展而来的。
I think what you're seeing are the files that support SharePoint designer, which essentially evolved out of Frontpage.
是的，它确实。 请参阅：
http://www.sharepoint2007security.com/guidance/firewall_rules
Yes, it does. See this:
http://www.sharepoint2007security.com/guidance/firewall_rules
WSS SDK 描述了 WSSv3 中可用的 RPC 扩展。 有关详细信息，请参阅 WSS SDK FrontPage 服务器扩展 RPC @ http://msdn。 microsoft.com/en-us/library/ms443099.aspx
The WSS SDK describes the RPC extensions available in WSSv3. For more information see the WSS SDK FrontPage Server Extensions RPC @ http://msdn.microsoft.com/en-us/library/ms443099.aspx