[11817] in bugtraq
Protected Storage Service on Windows 2000 (Beta 3)
daemon@ATHENA.MIT.EDU (Mnemonix)
Fri Sep 10 13:01:50 1999
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <002b01bef99a$6a971a80$b7e993c3@pluto>
Date: Wed, 8 Sep 1999 02:35:20 +0100
Reply-To: Mnemonix <mnemonix@GLOBALNET.CO.UK>
From: Mnemonix <mnemonix@GLOBALNET.CO.UK>
X-To: ntbugtraq@listserv.ntbugtraq.com
To: BUGTRAQ@SECURITYFOCUS.COM
The Protected Storage system on Windows 2000 has a vulnerablity where if,
when a system file is replaced, and the user chooses "browse" from the
Insert CD window then double clicks on the My Computer Icon on the right on
the new window they get a list of local drives. Right clicking on a drive
and then clicking on properties appears to do nothing. Nothing that is until
you log off. There on the Ctrl + Alt + Del logon screen is the drive's
properties.
Cheers,
David Litchfield
http://www.arca.com
http://www.infowar.co.uk/mnemonix
