Make Homepage | Add To Favorites | Print Page | Submit News | Feedback | Contact | 

Your Technical Computer Information Resource!  
     
  Technical Updates @ TACKtech Corp.  

10.31.2002 - MS02-064: Default Permissions Could Allow Trojan Horse Program (327522)



View Microsoft related news. On Windows 2000, the default permissions provide the Everyone group with Full access (Everyone:F) on the system root folder (typically, C:\). In most cases, the system root is not in the search path. However, under certain conditions - for instance, during logon or when applications are invoked directly from the Windows desktop via Start | Run - it can be.

This situation gives rise to a scenario that could enable an attacker to mount a Trojan horse attack against other users of the same system, by creating a program in the system root with the same name as some commonly used program, then waiting for another user to subsequently log onto the system and invoke the program. The Trojan horse program would execute with the user’s own privileges, thereby enabling it to take any action that the user could take.

- View Microsoft Security Bulletin MS02-064
- View Microsoft Knowledge Base Article - 327522
- Visit Microsoft Corporation

NID: 333 / Submitted by: TACKtech Team
Categories: Microsoft
Most recent Microsoft related news.
MS16-095 - Critical: Cumulative Security Update for Internet Explorer (3177356) - Version: 2.0
MS17-013 - Critical: Security Update for Microsoft Graphics Component (4013075) - Version: 3.0
MS17-013 - Critical: Security Update for Microsoft Graphics Component (4013075) - Version: 2.0
MS17-014 - Important: Security Update for Microsoft Office (4013241) - Version: 2.0
MS17-021 - Important: Security Update for Windows DirectShow (4010318) - Version: 2.0
View archive of Microsoft related news.

Visit the TACKtech Shop
  Popular Tech News  
  Most Viewed News  
  Top Affiliates  
........