Home page logo
/

bugtraq logo Bugtraq mailing list archives

Inside GetAdmin
From: mark () ntshop net (Mark Joseph Edwards)
Date: Tue, 8 Jul 1997 10:27:54 -0500


The nature of the getadmin bug is in the following API calls:
ChangeNtGlobalFlag(GetNtGlobalFlagPtr());


The above code creates the exploit. The GetNtGlobalFlagPtr() can be
replaced with a fix pointer, eliminating the need for READ access to the
ntoskrnl.exe, making it much tougher to defend against, while at the same
time, making it far less portable across NT systems.


Mark



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]