Microsoft Windows XP Fast User Switching Process Viewing Weakness

Bugtraq ID:	6280
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 29 2002 12:00AM
Updated:	Nov 29 2002 12:00AM
Credit:	Discovery is credited to Eitan Caspi <[email protected]>.
Vulnerable:	Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Home SP1 Microsoft Windows XP Home
Not Vulnerable:

Microsoft Windows XP Fast User Switching Process Viewing Weakness

Microsoft Windows XP contains a feature called Fast User Switching (FUS). This allows multiple users to be concurrently logged onto the system; only one user can interact with the system at a time.

There is a weakness in FUS that could allow a user that was previously a member of the Administrators group to still view other users' processes. If the user enabled the ability to view other users' processes while they were a member of the Administrators group, they will still be able to do this after they are removed from the Administrators group.

Microsoft Windows XP Fast User Switching Process Viewing Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows XP Fast User Switching Process Viewing Weakness

References:

• Technet Security (Microsoft)