lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue May 31 08:45:40 2005
From: patrick.otto at gmail.com (Patrick Otto)
Subject: [Windows XP] possible privilege escalation

On 5/31/05, NSC <news-letters@...ewin.ch> wrote:
> 
> >
> > Hmm, the setup program (.exe which runs an .msi) installs a classic
> > "annoying" developpement app (the other day it was some Microsoft
> > Office suite product). I doubt it would launch WMP for any reason, if
> > it's what you meant.
> > To get rid of the doubt, I just retried the installation process being
> > logged in as Admin, and nope, it didn't launch WMP.
> >
> >
> > Best regards,
> >
> >
> > --
> > Pif
> 
> Hello,
> 
> I'm not sure we're talking about the same thing.
> I don't meant setupe.exe but MPsetupeXP.exe.
> 
> At the end of many installations you have one ot two chechboxes (like
> "view readme.txt" and
> launch app now").
> 
> when you start the app from here, is starts under the "runas"(admin)
> account.
> 
> As you retried it's probaly something else.
> 
> Have a nice day.
> 
> 
> 
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 

Hi, i think he didnt install WMP.
I cant tell you more about the topic, i'm not using Windows.

Have a nice day.

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ