Results 1 to 4 of 4

Thread: Vulnerability: Windows 2000 / NT 4.0 Process Handle Local Privilage Elevation

  1. March 17th, 2002, 11:35 AM #1
    s0nIc
    s0nIc is offline
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584

    Exclamation Vulnerability: Windows 2000 / NT 4.0 Process Handle Local Privilage Elevation

    Microsoft Windows 2000 / NT 4.0 Process Handle Local Privilege Elevation Vulnerability


    A vulnerability has been reported in Microsoft Windows 2000 and NT 4 which could allow a user to gain SYSTEM level privileges on the local host.


    The debugging subsystem, which is available to all users, may be used to create duplicate handles to a privileged process. This may be used to allow an application with the privileges of the currently logged in user to execute arbitrary code with the privileges of the process that is accessed.

    Remote: Yes

    Exploit: hhtp://online.securityfocus.com/data/vulnerabilities/esploits/DebPloit.zip

    Source: http://www.xatrix.org/modules.php?op...thread&order=1
    Reply With Quote Reply With Quote
  2. March 17th, 2002, 01:30 PM #2
    Noia
    Noia is offline
    Now, RFC Compliant! Noia's Avatar
    Join Date
    Jan 2002
    Posts
    1,210
    They just keep coming and coming, don't they...
    Good post...
    - Noia
    With all the subtlety of an artillery barrage / Follow blindly, for the true path is sketchy at best. .:Bring OS X to x86!:.
    Og ingen kan minnast dei linne drag i dronningas andlet den fagre dag Då landet her kvilte i heilag fred og alle hadde kjærleik å elske med.
    Reply With Quote Reply With Quote
  3. March 17th, 2002, 01:38 PM #3
    bpx
    bpx is offline
    Member
    Join Date
    Oct 2001
    Posts
    60
    http://www.anticracking.sk/EliCZ/
    Reply With Quote Reply With Quote
  4. March 17th, 2002, 02:00 PM #4
    s0nIc
    s0nIc is offline
    Fastest Thing Alive s0nIc's Avatar
    Join Date
    Sep 2001
    Location
    Sydney
    Posts
    1,584
    this is like the ones i've encountered in wargames.. use a certain file to access different access / security levels..
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules