RE: Re: Remote root exploit for mod_gzip (with debug_mode)

[Frank Knobbe <frank () knobbe us>]

On Thu, 2003-11-20 at 17:31, Schmehl, Paul L wrote:
> > What user does apache run as under windows deployments?
> LOCALSYSTEM, which has no network privileges.


But in the past you have been able to use LOCALSYSTEM to create/edit an
account with Administrator privileges which you can then use to gain
network access. Your comment sounds like LOCALSYSTEM is harmless, and I
believe that is a wrong statement.

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part