bugtraq - Re: Microsoft VISTA TCP/IP stack buffer overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <492C7776.6020709@gmail.com>
Date: Tue, 25 Nov 2008 23:08:54 +0100
From: Edi Strosar <edi.strosar@...il.com>
To: Bugtraq <bugtraq@...urityfocus.com>
Subject: Re: Microsoft VISTA TCP/IP stack buffer overflow

Administrator lives in Ring 3 while this crash happens in Ring 0. 
Nobody, not even Admin shouldn't be able to corrupt kernel space. It's 
not a security issue per se - it's just a bug.


dale@...efaq.com wrote:
> So, let me try and understand this.
> 
> According to what you have written, and the MSDN documentation on this CreateIpForwardEntry2 call, you need to be (at least) a member of the Administrators group.
> 
> So how is this "security vulnerability" any different to me creating a program, which will require the same Administrative rights, to say, wipe the boot configuration file?
>