[Full-disclosure] 70 million computers are using Windows 98 right now

Tonnerre Lombard tonnerre.lombard at sygroup.ch
Wed Aug 2 09:15:59 BST 2006


Salut,

On Tue, 2006-08-01 at 15:00 -0400, Micheal Espinola Jr wrote:
> Windows NT Workstation was in fact identical to Server - except with
> intentional limiters placed within the registry to prevent admins from
> avoiding purchasing the "full" server product.  However, you could
> hack it and make it a "Server".

In fact, this of course also worked the other way around. Also, there
was a bug in MSIE ASN1 parsing once which could be exploited to write
random registry keys with the user's privileges. So what we did was
this: we had a link on our internal archive web server which read "Don't
click here". Now if some stupid NT admin surfed as a user with
Domain-Admin privileges and clicked on the link, the NT domain server
would believe to be a workstation on the next boot. This happened from
time to time and caused a lot of amusement along us UNIX admins.

				Tonnerre
-- 
SyGroup GmbH
Tonnerre Lombard

Loesungen mit System
Tel:+41 61 333 80 33    Roeschenzerstrasse 9
Fax:+41 61 383 14 67    4153 Reinach BL
Web:www.sygroup.ch      tonnerre.lombard at sygroup.ch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 824 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060802/b846f477/attachment.bin 


Full-Disclosure is hosted and sponsored by Secunia.