Protected Storage Service on Windows 2000 (Beta 3)

From: Mnemonix (mnemonixat_private)
Date: Tue Sep 07 1999 - 18:35:20 PDT

Next message: Jedi/Sector One: "Re: remote DoS against inetd and ssh"

Previous message: Gérald Grévren: "[Security] Spoofed Id in Bluestone Sapphire/Web"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

The Protected Storage system on Windows 2000 has a vulnerablity where if,
when a system file is replaced, and the user chooses "browse" from the
Insert CD window then double clicks on the My Computer Icon on the right on
the new window they get a list of local drives. Right clicking on a drive
and then clicking on properties appears to do nothing. Nothing that is until
you log off. There on the Ctrl + Alt + Del logon screen is the drive's
properties.
Cheers,
David Litchfield
http://www.arca.com
http://www.infowar.co.uk/mnemonix

Next message: Jedi/Sector One: "Re: remote DoS against inetd and ssh"
Previous message: Gérald Grévren: "[Security] Spoofed Id in Bluestone Sapphire/Web"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:02:37 PDT