COMMAND

    shade package

SYSTEMS AFFECTED

    Win NT

PROBLEM

    Shade  are  first  software  package  to  provide  on the fly disk
    encryption for  Windows NT.   Shade uses  MDC/SHA -  160 bit block
    encryption algorithm.

    Joseph Grey found some  vulnerabilities with this package.  If you
    have a mounted Shade volume and "Close all programs and log on  as
    a different user", the Shade  volume is still mounted. It  doesn't
    matter if you  log back on as  the same or a  different user.  The
    volume  is  still  accessable.  If  you  do a restart instead, the
    volume is unmounted properly.

SOLUTION

    Works are on  a version 1.1  that will have  added functionallity.
    This is supposed to be available at the end of April 1997.