[11866] in bugtraq
Re: COM and Windows 2000
daemon@ATHENA.MIT.EDU (thomasz@HOSTMASTER.ORG)
Mon Sep 13 01:44:58 1999
Mail-Followup-To: BUGTRAQ@SECURITYFOCUS.COM
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
protocol="application/pgp-signature"; boundary="K7vMR0LOE8LnfpMf"
Message-Id: <19990912173217.A11386@tk212017114173.teleweb.at>
Date: Sun, 12 Sep 1999 17:32:17 +0200
Reply-To: thomasz@HOSTMASTER.ORG
From: thomasz@HOSTMASTER.ORG
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <000e01bef80f$7d82baf0$76e893c3@pluto>
--K7vMR0LOE8LnfpMf
Content-Type: text/plain; charset=us-ascii
> I haven't tested this yet on Server but I'd imagine this would go for the
> likes of Backup and Server Operators.
> I've written (well I wrote 1/10th and the MFC wizard did the rest ;-) an MFC
> app that will edit the registry (changing MSIServer to Spooler), call
Everyone having the "Restore Files Permission" can undermine system security because he can not only replace any system file disregarding permissions but also replace permissions on any file.
Therefore Microsoft recommends granting this privilege only to trusted individues.
We'd better face the fact that Windows hasn't been designed to be a secure system and will therefore never be.
Thommy
Growing old is mandatory... growing up is optional.
-------------------------------------------------
T h o m a s Z e h e t b a u e r ( TZ251 )
PGP encrypted mail preferred - KeyID 96FFCB89
mail pgp-key-request@hostmaster.org
-------------------------------------------------
--K7vMR0LOE8LnfpMf
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: F1TJSrMw0IUVqAk0GzwYDJrXSVnVo/B1
iQEVAwUBN9vHemD1OYqW/8uJAQFVvQgAkwzlINGCWt2DpshkfQsFEc74AvW8IhJg
BZJCvQANMOpOaeOD5zbEPdsytg8MgY3URATiRSIueV0rgY8y8o8W2fn5DveRkv/q
LME3VFlx/H9aMlU9JzIgh9G0oecLkkoGj6naz0NZOs1B+0A/NOrGXdUehhO20lke
kjGDBQR3kDY4qG3KW5tJofTYoMHTTlpe6rqiPQ7kfGklOGNKS4w/claCL86D1nMs
k9iAgk/Q0KhhEi4fLQ93eTe+wyWrspkC3eFMu5Oh9M8uY7UcYlbMZQbF8X+VD5D9
Z374DJxAEK5APafLywhiTcuOyZnPYztBNR3W812tT6zJez9HzTZbrw==
=0XoG
-----END PGP SIGNATURE-----
--K7vMR0LOE8LnfpMf--
