Vulnerability Development mailing list archives

R: office 2k security bug?

From: raist () CTRADE IT (Raistlin)
Date: Wed, 23 Feb 2000 19:14:53 +0100

In short terms: a normal user can gain system access under NT by the

mean's

of the "installation wizard" by reading/writing to the registry


In Windows 2000 there's an explicit distinction between "power users" who
can install applications and "normal users" who cannot. I can figure this is
the answer to your legitimate alert: in fact, it seems that a malicious user
under NT could access some part of the registry in that way.

Raistlin

Current thread:

Information on Raptor Martin M Samson (Feb 20)
- Re: Information on Raptor Yiorgos Adamopoulos (Feb 21)
- (Fwd) Re: vulnerability database Felix Harris (Feb 21)
- Re: Information on Raptor Malikai (Feb 21)
  - Re: Information on Raptor James Crooks (Feb 22)
    - Re: Information on Raptor Malikai (Feb 23)
    - Consulting lameness, RE: Information on Raptor Ben Grubin (Feb 23)
    - Single SignOn Vanna P. Rella (Feb 23)
    - Re: Single SignOn Simple Nomad (Feb 24)
  - office 2k security bug? Torgeir Hansen (Feb 22)
    - R: office 2k security bug? Raistlin (Feb 23)
    - Fwd: ANNOUNCEMENT: Lighting Firewall for Linux released Grzegorz Stelmaszek (Feb 23)
- Re: Information on Raptor James Crooks (Feb 21)
- Re: Information on Raptor David J Laumann (Feb 21)
- <Possible follow-ups>
- Re: Information on Raptor Marcelo Amaral - ALTAVISTA.NET (Feb 21)
- Re: Information on Raptor CL: Nelson, Jeff (Feb 24)
  - Re: Information on Raptor IC&S - Eelco van Beek (Feb 25)
  - Re: Information on Raptor Daniel Liebster (Feb 25)
- Re: Information on Raptor Ben Grubin (Feb 24)
  - Dedicated vs "shared use" firewalls Forrest W. Christian (Feb 24)
    - Buffer overflows on Netware 4x and 5x Roland Kool (Feb 28)

(Thread continues...)