Vulnerability Development mailing list archives

Re: The problem with NT services ...


From: Pavel Kankovsky <peak () ARGO TROJA MFF CUNI CZ>
Date: Sun, 21 Jan 2001 15:55:40 +0100

On Fri, 19 Jan 2001, Balamurugan Koodalingam wrote:

One significant problem in using Windows NT service
application is that the executable file of the service
application could be replaced with some other
executable - of course another service application, in
which one can do whatever he wants.

If the access control of your operating system cannot protect
critical system files from being messed with (for whatever
reason) then there will be absolutely no security regardless
of the amount of effort you spend to thwart attacks. Game over.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."


Current thread: