hacking security forum

Re: [Full-Disclosure] local SYSTEM on Windows vs. local root on Unix

From: 3APA3A <3APA3A@SECURITY.NNOV.RU>
Date: Wed Jan 21 2004 - 01:01:58 CST

Dear KF,

For standalone box things are same. One can think it's possible to
protect file system against Local System under Windows, but this
protection can be bypassed. One may think it's possible to limit
syscalls for root under Unix - but Windows can be protected in same way.

For network (if can you get access to network having access to local
superuser account) everything depends on network infrastructure, not on
host OS, but NFS is usually less secure against this kind of attacks
comparing to CIFS.

--Tuesday, January 20, 2004, 12:20:58 AM, you wrote to full-disclosure@lists.netsys.com:

K> I am currious to know what you folks think the differences are between
K> obtaining local SYSTEM on a win32 box and obtaining root on a Unix machine.

K> Same thing?
K> Different?
K> One is worse than the other? Which one? Why?

K> *flame on*
K> -KF

K> _______________________________________________
K> Full-Disclosure - We believe in it.
K> Charter: http://lists.netsys.com/full-disclosure-charter.html

-- 
~/ZARAZA
Ну а в целом, Уильям, здешний климат - ежели только
это можно назвать климатом, вполне сносный. (Твен)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Wed Jan 21 01:37:33 2004

This archive was generated by hypermail 2.1.8 : Wed Jan 21 2004 - 02:01:02 CST

Custom Search