Full Disclosure mailing list archives

Re: 70 million computers are using Windows 98 right now


From: Tonnerre Lombard <tonnerre.lombard () sygroup ch>
Date: Wed, 02 Aug 2006 10:15:59 +0200

Salut,

On Tue, 2006-08-01 at 15:00 -0400, Micheal Espinola Jr wrote:
Windows NT Workstation was in fact identical to Server - except with
intentional limiters placed within the registry to prevent admins from
avoiding purchasing the "full" server product.  However, you could
hack it and make it a "Server".

In fact, this of course also worked the other way around. Also, there
was a bug in MSIE ASN1 parsing once which could be exploited to write
random registry keys with the user's privileges. So what we did was
this: we had a link on our internal archive web server which read "Don't
click here". Now if some stupid NT admin surfed as a user with
Domain-Admin privileges and clicked on the link, the NT domain server
would believe to be a workstation on the next boot. This happened from
time to time and caused a lot of amusement along us UNIX admins.

                                Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      tonnerre.lombard () sygroup ch

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: