Microsoft Roaming Profile Resource Quota Bypass Weakness
BID:9186
Info
Microsoft Roaming Profile Resource Quota Bypass Weakness
| Bugtraq ID: | 9186 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 09 2003 12:00AM |
| Updated: | Dec 09 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Nick Eoannids. |
| Vulnerable: |
Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server |
| Not Vulnerable: | |
Discussion
Microsoft Roaming Profile Resource Quota Bypass Weakness
Proquota has been reported prone to a weakness that may be exploited by a local user to bypass profile storage limits supposedly enforced by the proquota application. It has been reported that an attacker who has interactive access to a system, may make the proquota application behave in an unstable manner by having an open unsaved notepad session active when a "Log Off" procedure is invoked from the start menu.
Once the proquota application has failed, it has been reported that the attacker may proceed without any resource limits being enforced on the size of the current profile.
Proquota has been reported prone to a weakness that may be exploited by a local user to bypass profile storage limits supposedly enforced by the proquota application. It has been reported that an attacker who has interactive access to a system, may make the proquota application behave in an unstable manner by having an open unsaved notepad session active when a "Log Off" procedure is invoked from the start menu.
Once the proquota application has failed, it has been reported that the attacker may proceed without any resource limits being enforced on the size of the current profile.
Exploit / POC
Microsoft Roaming Profile Resource Quota Bypass Weakness
There is no exploit required.
There is no exploit required.
Solution / Fix
Microsoft Roaming Profile Resource Quota Bypass Weakness
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft Roaming Profile Resource Quota Bypass Weakness
References:
References:
- Windows 2000 Homepage (Microsoft)
- Windows XP Homepage (Microsoft)