Full Disclosure mailing list archives
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues
From: KJKHyperion <hackbunny () s0ftpj org>
Date: Sun, 11 Mar 2007 00:50:07 +0100
3APA3A wrote:
And now is most exciting: Users have permission to create files in this directory, that is pre-open attack is possible.
holy %&$@£%!# you're right: D:\WINDOWS\security\templates>more "setup security.inf" | findstr /r /i "\<temp\>" "d:\windows\temp", 2, "D:P(A;CI;0x100026;;;BU)(A;CIOI;GRGWGXSD;;;PU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY) (A;CIOI;GA;;;CO)" Where "(A;CI;0x100026;;;BU)" = A = access allowed CI = container and items (subfolders and files), this folder only 0x100026 = SYNCHRONIZE, traverse, create files, create subfolders BU = BUILTIN\Users /revokes /plans to eventually make a custom security policy .inf _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues, (continued)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Laundrup, Jens (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
- Message not available
- Message not available
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 10)
- Message not available
- Message not available
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 10)
- Message not available
- Message not available
- Message not available
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues KJKHyperion (Mar 10)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues czino2 (Mar 11)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
- Message not available
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues steven (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)