JSI Tip 2034. RDISK exposes your registry settings.

When you run Rdisk.exe \[/s\[-\]\] to update your repair folder (and ERD without the - switch), it creates a temporary file that can be read/written while the Rdisk is running.

Any user can gain access to this file, exposing your registry settings.

While the file is deleted if Rdisk successfully completes, it isn't, if the job is interrupted or terminates abnormally.

Microsoft has created a fix for this exposure:

Windows NT 4.0

         x86: Q249108i.exe

         Alpha: Q249108a.exe

Windows NT 4.0, Terminal Server Edition

         x86: Q249108i.exe