[Full-disclosure] 70 million computers are using Windows 98 right now
Tonnerre Lombard
tonnerre.lombard at sygroup.ch
Wed Aug 2 09:15:59 BST 2006
Salut,
On Tue, 2006-08-01 at 15:00 -0400, Micheal Espinola Jr wrote:
> Windows NT Workstation was in fact identical to Server - except with
> intentional limiters placed within the registry to prevent admins from
> avoiding purchasing the "full" server product. However, you could
> hack it and make it a "Server".
In fact, this of course also worked the other way around. Also, there
was a bug in MSIE ASN1 parsing once which could be exploited to write
random registry keys with the user's privileges. So what we did was
this: we had a link on our internal archive web server which read "Don't
click here". Now if some stupid NT admin surfed as a user with
Domain-Admin privileges and clicked on the link, the NT domain server
would believe to be a workstation on the next boot. This happened from
time to time and caused a lot of amusement along us UNIX admins.
Tonnerre
--
SyGroup GmbH
Tonnerre Lombard
Loesungen mit System
Tel:+41 61 333 80 33 Roeschenzerstrasse 9
Fax:+41 61 383 14 67 4153 Reinach BL
Web:www.sygroup.ch tonnerre.lombard at sygroup.ch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 824 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060802/b846f477/attachment.bin
Full-Disclosure is hosted and sponsored by Secunia.