Re: ISS Security Alert

[aleph1 () dfw net (Aleph One)]

On Wed, 22 Oct 1997, X-Force wrote:

> ISS Security Alert
> October 21, 1997
> Scheduler/Winlogin Keys have Incorrect Permissions
[ snip ]
> References:
>  http://support.microsoft.com/support/kb/articles/q126/7/13.asp
>  http://www.infoworld.com/cgi-bin/displayStory.pl?971014.wntsecurity.htm

You might want to check your references more carefully. The KB article
(posted to this list 5 days ago) talks about the Run, RunOnce, and
Uninstall registry keys and the Everyone group. Ditto for the InforWorld
article. At no point there is any mention to the Schedule or UserInit keys
or the Server Operators group.

Aleph One / aleph1 () dfw net
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01