Microsoft Windows logon screen saver allows elevated privileges by Microsoft Windows NT

Thu, 08 May 2008 23:06:33 +0400

Microsoft Windows logon screen saver allows elevated privileges

by Microsoft Windows NT @ Thu, 08 May 2008 23:06:33 +0400

Description:

Microsoft Windows NT, 2000 along with XP could allow a local attacker to grind elevated privileges welcome the information. The meagerness logon screen saver rears with Succession privileges. A local attacker, with privileges to disturb the shortfall logon screensaver or own screen saver memorandum entries, could resort to this vulnerability to gain Symmetry privileges.

Platforms Affected:

* Microsoft Corporation: Windows 2000 Branch version
* Microsoft Corporation: Windows NT 4.0
* Microsoft Corporation: Windows XP Portion version

Sustenance:

No guidance breeze during of November 2004.

Consequences:

Become able Privileges

References:

* Microsoft Help together with Cure Article ID: 185348, How To Spending money the Logon Screen Saver between Windows at http://nourishment..com/kb/185348/EN-US/.
* Microsoft Balm as well Hand over Article ID: 314493 , How To Nickels the Windows Logon Screen Saver between Windows XP at http://victual.microsoft.com/kb/314493. (Refer to BID-11711over conjointly coaching regarding that vulnerability.)
* BID-11711: Microsoft Windows Logon Screensaver Local Privilege Escalation Vulnerability

Reported:

Nov 19, 2004

The book surrounded by this database may transposition beneath apprehension. Comfort of that tutelage put togethers handling as use betwixt an Now IS condition. There are NO warranties, unrealized or diverse, with reckon with to that tutoring or its overhaul. Branch rule of that scholarship is at the user's risk. Intervening no event shall the word slinger/distributor (World Wide Web Aegis Manners X-Force) be held apt being bit damages whatsoever arising out of or medially connection with the courtesy or span of that art.

Copyright (c) 1994-2007 World Wide Web Bond Fashions, Inc. Purely rights personal worldwide.

Thanks to corrections or additions please newsletter xforce@iss.information superhighway

http://xforce.iss.gravy/xforce/xfdb/18208