• October 23, 2020, 08:27:14 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Upload multiple files at once+Security issue  (Read 3417 times)

network1027

  • Level 2 Member
  • **
  • Posts: 27
Upload multiple files at once+Security issue
« on: May 25, 2014, 01:47:57 AM »

Hi  :D

Playing around with the NAS functions of the DIR-626L, I'm quite puzzled by two things.

1. Using the web access, I can't seem to be able to upload multiple files at once to the 626L. Likewise, I can't seem to upload a whole folder. Did I miss something ?
( uploading several files at once is often needed : CD album, etc ... ).

2. I managed to dodge the problem by typing \\[IP address] (of the DIR 626L) in the Windows File Browser :
I got full access of the whole drive, without any credential or password asked, with full browse, write and delete permissions.
Although this doesn't seem to 'leak' to the Wan side (tests ongoing) , this is quite a security/reliability issue, no ?

Thanks  :)
Network1027
« Last Edit: May 25, 2014, 05:44:52 AM by network1027 »
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49276
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Upload multiple files at once+Security issue
« Reply #1 on: May 25, 2014, 12:03:32 PM »

Playing around with the NAS functions of the DIR-626L, I'm quite puzzled by two things.

1. Using the web access, I can't seem to be able to upload multiple files at once to the 626L. Likewise, I can't seem to upload a whole folder. Did I miss something ?
( uploading several files at once is often needed : CD album, etc ... ).
It may not be supported that uploading mutiple files at once when using the web access. I'm not too familair with using the web access on these L series routers as I don't use it often, mainly for some remote access there and there or maybe to stream.

2. I managed to dodge the problem by typing \\[IP address] (of the DIR 626L) in the Windows File Browser :
I got full access of the whole drive, without any credential or password asked, with full browse, write and delete permissions.
Although this doesn't seem to 'leak' to the Wan side (tests ongoing) , this is quite a security/reliability issue, no ?
Most DIR series routers that have this connection configuration and is supported by D-Link thats on the LAN side only. Its a work around solution for users who don't want to use Shareport which SP also I believe uses this similar connection configuration to connect to the USB drives.
How to map a USB Drive to your PC without using Shareport software
« Last Edit: January 08, 2015, 12:34:17 PM by FurryNutz »
Logged
"Nothing Funny about It...." We are not here to Impress anyone! You have a be a COMPETENT user first to under stand COMPETENT help!

network1027

  • Level 2 Member
  • **
  • Posts: 27
Re: Upload multiple files at once+Security issue
« Reply #2 on: May 26, 2014, 01:34:46 AM »

Hi FurryNutz  :D

"1. It may not be supported that uploading mutiple files at once when using the web access. I'm not too familair with using the web access on these L series routers as I don't use it often, mainly for some remote access there and there or maybe to stream."

OK. Apparently no way to upload multiple files at once

"2. Most DIR series routers that have this connection configuration and is supported by D-Link thats on the LAN side only. Its a work around solution for users who don't want to use Shareport which SP also I believe uses this similar connection configuration to connect to the USB drives."
OK. So this leads two conclusions :
a) the storage has to be considered 'insecure' on the Lan side ( open to any Lan hosts )
b) D-Link credentials-menu only real value is to control Shareport's Wan accesses

Is this right ?  :D
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49276
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Upload multiple files at once+Security issue
« Reply #3 on: May 26, 2014, 06:53:13 AM »

I would presume you maybe correct.
Logged
"Nothing Funny about It...." We are not here to Impress anyone! You have a be a COMPETENT user first to under stand COMPETENT help!