Bugtraq: Re: COM and Windows 2000

[thomasz () HOSTMASTER ORG (thomasz () HOSTMASTER ORG)]

> I haven't tested this yet on Server but I'd imagine this would go for the
> likes of Backup and Server Operators.
> I've written (well I wrote 1/10th and the MFC wizard did the rest ;-) an MFC
> app that will edit the registry (changing MSIServer to Spooler), call
Everyone having the "Restore Files Permission" can undermine system security because he can not only replace any system 
file disregarding permissions but also replace permissions on any file.
Therefore Microsoft recommends granting this privilege only to trusted individues.
We'd better face the fact that Windows hasn't been designed to be a secure system and will therefore never be.

Thommy

Growing old is mandatory... growing up is optional.
-------------------------------------------------
  T h o m a s   Z e h e t b a u e r   ( TZ251 )
  PGP encrypted mail preferred - KeyID 96FFCB89
       mail pgp-key-request () hostmaster org
-------------------------------------------------

<!-- attachment="bin0a19100" -->
<HR>
<UL>
<LI>application/pgp-signature attachment: stored
</UL>