Windows 2000 Allows Elevated Privleges

 
Windows 2000 Allows Elevated Privileges
Reported June 15 by
Microsoft

VERSIONS EFFECTED
Windows 2000 platforms

DESCRIPTION

A vulnerability exists in Windows 2000 that could allow aan intruder to gain elevated privileges on a system that person can physically log onto at the keyboard.

According to Microsoft"s bulletin on the matter "in Windows 2000 a hierarchy of container objects is used to separate processes. Every session contains one or more windows stations; every windows station contains one or more desktops. By design, processes are constrained to run within a windows station, and the threads in the process run in one or more desktops. A process in one windows station should not be able to access desktops belonging to another windows station. However, due to an implementation error, this could happen under very specific circumstances."

VENDOR RESPONSE

Microsoft is aware of this matter and has released a patch to correct the problem. Be sure to read Support Online article Q260197

CREDITS
Discovered and reported by Microsoft

Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish