bugtraq - Re: anti Windows XP SP2 firewall trick

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20050908150047.B1184@planetcobalt.net>
Date: Thu, 8 Sep 2005 15:00:47 +0200
From: Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>
To: bugtraq@...urityfocus.com
Subject: Re: anti Windows XP SP2 firewall trick


On 2005-09-07 crusoe@...xandria.cc wrote:
[...]
> #c:\bugg.exe          Server running on port 2001
> 
> connect to server with :
> 
> #telnet localhost 2001
[...]
> Our Registry path is
> 
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
> 
> and there you can create string value
> 
> Value name                    Value           
> 
> C:\chat.exe  ........ C:\chat.exe:*:Enabled:chat

Being able to create that value means that you have admin privileges on
that box, thus you can do whatever you want anyway (including completely
shutting down the Windows-Firewall). So this is by no means a trick or
flaw, but simply expected behaviour.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668