NT RDISK Registry Enumeration File Vulnerability
BID:947
Info
NT RDISK Registry Enumeration File Vulnerability
| Bugtraq ID: | 947 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 21 2000 12:00AM |
| Updated: | Jan 21 2000 12:00AM |
| Credit: | Reported to Microsoft by Arne Vidstrom. Publicized in Microsoft Security Bulettin MS00-004, released January 21, 2000. |
| Vulnerable: |
Microsoft Windows NT 4.0 |
| Not Vulnerable: |
Microsoft Windows 2000 Professional |
Exploit / POC
NT RDISK Registry Enumeration File Vulnerability
see discussion
see discussion
References
NT RDISK Registry Enumeration File Vulnerability
References:
References:
- Frequently Asked Questions: Microsoft Security Bulletin MS00-004 (Microsoft)
- Q156328: Description of Windows NT Emergency Repair Disk (Microsoft)
- Q249108: Registry Data Is Viewable By All Users During Rdisk Repair Update (Microsoft)
- RDISK registry enumeration file vulnerability in Windows NT 4.0 Terminal Server (Arne Vidstrom)