Full Armor Bypass Vulnerability

Bugtraq ID:	103
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-1999-1443
Remote:	Yes
Local:	No
Published:	May 31 1998 12:00AM
Updated:	Jul 11 2009 12:16AM
Credit:	This vulnerability was reported by Kimmie Dicaire <[email protected]> to the BugTraq mailing list.
Vulnerable:	Micah Software Full Armor for Windows 95
Not Vulnerable:

Full Armor Bypass Vulnerability

Full Armor by Micah Softwre is a desktop protection software. If when using the software you get a Full Armor warning that you don't have enough rights (or any other Full Armor dialog box) you type Ctrl-Alt-Del to get the task manager, instead of clicking on OK, you can end the Full Armor task giving you full access to desktop PC.

Full Armor can also be bypassed by turning off the computer as it boots up. Next time it boots ScanDisk will be run. While the program runs you can ctrl-break out of it into an unprotected promt.

Full Armor Bypass Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Full Armor Bypass Vulnerability

Solution:
Micah Software is workign on a solution.

Full Armor Bypass Vulnerability

References: