Bugtraq: Re: anti Windows XP SP2 firewall trick

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2005-09-07 crusoe () alexandria cc wrote:
[...]
> #c:\bugg.exe          Server running on port 2001
>
> connect to server with :
>
> #telnet localhost 2001
[...]
> Our Registry path is
>
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
>
> and there you can create string value
>
> Value name                    Value           
>
> C:\chat.exe  ........ C:\chat.exe:*:Enabled:chat
Being able to create that value means that you have admin privileges on
that box, thus you can do whatever you want anyway (including completely
shutting down the Windows-Firewall). So this is by no means a trick or
flaw, but simply expected behaviour.

Regards
Ansgar Wiechers
-- 
"Another option [for defragmentation] is to back up your important files,
erase the hard disk, then reinstall Mac OS X and your backed up files."
--http://docs.info.apple.com/article.html?artnum=25668