Re: Fwd: Third-party application developers and the WMF flaw

[Florian Weimer <fw () deneb enyo de>]

* Col:

> I would have to say theres quite a few things MS know about and arent
> telling. I have had a consultant brag about being able to compromise
> our whole root AD domain using basic techniques and no tools. All he
> needed was phyisical or RDP access to a DC (in the child domain) using
> a non-privilaged account.

But this is rather well-documented AFAIK.  In an AD tree, trust
propagates both ways for some obscure technical reasons.  (I'm not a
Windows networking guy, don't ask me about details.)
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.