Bugtraq mailing list archives

Protected Storage Service on Windows 2000 (Beta 3)


From: mnemonix () GLOBALNET CO UK (Mnemonix)
Date: Wed, 8 Sep 1999 02:35:20 +0100


The Protected Storage system on Windows 2000 has a vulnerablity where if,
when a system file is replaced, and the user chooses "browse" from the
Insert CD window then double clicks on the My Computer Icon on the right on
the new window they get a list of local drives. Right clicking on a drive
and then clicking on properties appears to do nothing. Nothing that is until
you log off. There on the Ctrl + Alt + Del logon screen is the drive's
properties.
Cheers,
David Litchfield
http://www.arca.com
http://www.infowar.co.uk/mnemonix


Current thread: