Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: anti Windows XP SP2 firewall trick
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 8 Sep 2005 15:00:47 +0200

On 2005-09-07 crusoe () alexandria cc wrote:
[...]
#c:\bugg.exe          Server running on port 2001

connect to server with :

#telnet localhost 2001
[...]
Our Registry path is

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List

and there you can create string value

Value name                    Value           

C:\chat.exe  ........ C:\chat.exe:*:Enabled:chat

Being able to create that value means that you have admin privileges on
that box, thus you can do whatever you want anyway (including completely
shutting down the Windows-Firewall). So this is by no means a trick or
flaw, but simply expected behaviour.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault