[28616] in bugtraq

home help back first fref pref prev next nref lref last post

RE: DoS attack on Windows 2000 Terminal Server

daemon@ATHENA.MIT.EDU (Diogo Fernandes)
Fri Jan 24 13:48:17 2003

From: "Diogo Fernandes" <dfernandes@realmedia.com>
To: <bugtraq@securityfocus.com>
Date: Fri, 24 Jan 2003 10:41:20 -0200
Message-ID: <809327607B9FCB44A3FEBDD71CA11C7B03539D@rmbr.realad.com.br>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
In-Reply-To: <809327607B9FCB44A3FEBDD71CA11C7B380DA9@rmbr.realad.com.br>

Hi, all

> Tested on Windows 2000 Server (IE55, SP2) and Windows 2000 Server
(IE55, SP3). I do not have easy access to other 
> platforms at the moment.

Tested on Windows Xp Professional, w/o SP. The problem exists.


> Workaround
> - Remove all permissions from MSGINA.DLL for "Power Users", "Users"
and
>  "Everyone"

We have a problem here. If you try to change permissions from
MSGINA.DLL, you get a warning, talking about to change the parent
permissions, too. As my experience is in Unices systems, what kind of
problems can I have if I change the permissions of my WINNT folder ? 



Diogo Carlos Fernandes
Technical Support Manager

Real Media Latin America 
www.realmedia.com 

Phone .: 55+11+3842-2166 
Mobile .: 55+11+9266-5325 
e-mail .: dfernandes@realmedia.com 



home help back first fref pref prev next nref lref last post