|
|
Family: Windows --> Category: infos
SMB Registry : permissions of winlogon Vulnerability Scan
Vulnerability Scan Summary
Acertains the access rights of a remote key
Detailed Explanation for this Vulnerability Test
Synopsis :
Local users can gain SYSTEM rights.
Description :
The registry key HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
is writeable by users who are not in the admin group.
This key contains a value which defines which program should be run when a
user logs on.
As this program runs in the SYSTEM context, the users who have the right to
change the value of this key can gain more rights on this host.
Solution :
Use regedt32 and set the permissions of this key to :
- admin group : Full Control
- system : Full Control
- everyone : Read
Threat Level:
High / CVSS Base Score : 7
(AV:L/AC:L/Au:NR/C:C/A:C/I:C/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
