Full Disclosure: Re: local SYSTEM on Windows vs. local root on Unix

[3APA3A <3APA3A () SECURITY NNOV RU>]

Dear KF,

For  standalone  box  things  are  same.  One can think it's possible to
protect  file  system  against  Local  System  under  Windows,  but this
protection  can  be  bypassed.  One  may  think  it's  possible to limit
syscalls for root under Unix - but Windows can be protected in same way.

For  network  (if  can  you get access to network having access to local
superuser  account) everything depends on network infrastructure, not on
host  OS,  but  NFS  is usually less secure against this kind of attacks
comparing to CIFS.

--Tuesday, January 20, 2004, 12:20:58 AM, you wrote to full-disclosure () lists netsys com:

K> I am currious to know what you folks think the differences are between
K> obtaining local SYSTEM on a win32 box and obtaining root on a Unix machine.

K> Same thing?
K> Different?
K> One is worse than the other? Which one? Why?

K> *flame on*
K> -KF

K> _______________________________________________
K> Full-Disclosure - We believe in it.
K> Charter: http://lists.netsys.com/full-disclosure-charter.html


-- 
~/ZARAZA
Ну а в целом, Уильям, здешний климат - ежели только
это можно назвать климатом, вполне сносный. (Твен)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html