full-disclosure - Internet Explorer (BAN IT !!!)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <009501c38eb1$aae18d90$0100a8c0@p3600>
From: chows at ozemail.com.au (gregh)
Subject: Internet Explorer (BAN IT !!!)

----- Original Message ----- 
From: "Irwan Hadi" <irwanhadi@...by.com>
To: "gregh" <chows@...mail.com.au>
Cc: "Stephen" <alf1num3rik@...oo.com>; <full-disclosure@...sys.com>
Sent: Thursday, October 09, 2003 3:55 PM
Subject: Re: [Full-Disclosure] Internet Explorer (BAN IT !!!)


> On Thu, Oct 09, 2003 at 07:54:08AM +1000, gregh wrote:
>
> >
> > ----- Original Message ----- 
> > From: "Stephen" <alf1num3rik@...oo.com>
> > To: <full-disclosure@...sys.com>
> > Sent: Thursday, October 09, 2003 5:19 AM
> > Subject: [Full-Disclosure] Internet Explorer (BAN IT !!!)
> >
> >
> > >
> > > It becomes really dangerous to use IE ...
> > >
> > > http://www.k-otik.com/WMPLAYER-TEST/
> > >
> > > God bless Mozilla
> > >
> > > http://www.mozilla.org/
> > >
> >
> >
> > Your test didn't work on my IESP1 under XP with all patches excepting
> > 811394. Absolutely no effect on WMP. My original WMP remains and works.
>
> It depends whether you were logging as a privileged user or not.
> If not, then your browser can't delete the wmplayer.exe file, because
> the only user that can change/delete the wmplayer.exe file is privileged
> user.
> C:\PROGRA~1\Windows Media Player>cacls wmplayer.exe
> C:\PROGRA~1\Windows Media Player\wmplayer.exe BUILTIN\Users:R
>                                               BUILTIN\Power Users:C
>                                               BUILTIN\Administrators:F
>                                               NT AUTHORITY\SYSTEM:F
>
>
> C:\PROGRA~1\Windows Media Player>
>
> The problem is just too many people are running their Windows with
> Full Privileges.
>


Didnt matter what I logged in as. I normally am ADMIN, naturally but a
priveleged user, a very limited user - no difference. The exploit didnt
work.

Greg.