full-disclosure - Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200402182328.i1INSrm7018865@mailserver1.hushmail.com>
From: auto4751 at hushmail.com (auto4751@...hmail.com)
Subject: Re: Multiple WinXP kernel vulns can give user mode programs kernel mode privileges

is this really exciting, like cant u always get system if u have SeDebugPrivilege
and then go system to kernel??? c00l to get around some kernel protection
that wont let u load a driver though

allways nice 2 see some real tech posts on the lists 4 once instead of
all that usual 'hey other security d00d, my d*x bigger then urs' drivell

-g33k_sp33k

> Multiple WinXP kernel vulns can give user mode programs kernel
> mode privileges
> 
> Summary
> =======
> 
> There exist several vulnerabilities in one of Windows XP
> kernel's native API functions which allow any user with the
> SeDebugPrivilege privilege to execute arbitrary code in kernel
> mode, and read from and write to any memory address, including
> kernel memory.




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427