Re: [Full-Disclosure] Internet Explorer (BAN IT !!!)

["gregh" <chows@ozemail.com.au>]

----- Original Message ----- 
From: "Irwan Hadi" <irwanhadi@phxby.com>
To: "gregh" <chows@ozemail.com.au>
Cc: "Stephen" <alf1num3rik@yahoo.com>; <full-disclosure@netsys.com>
Sent: Thursday, October 09, 2003 3:55 PM
Subject: Re: [Full-Disclosure] Internet Explorer (BAN IT !!!)


> On Thu, Oct 09, 2003 at 07:54:08AM +1000, gregh wrote:
>
> >
> > ----- Original Message ----- 
> > From: "Stephen" <alf1num3rik@yahoo.com>
> > To: <full-disclosure@netsys.com>
> > Sent: Thursday, October 09, 2003 5:19 AM
> > Subject: [Full-Disclosure] Internet Explorer (BAN IT !!!)
> >
> >
> > >
> > > It becomes really dangerous to use IE ...
> > >
> > > http://www.k-otik.com/WMPLAYER-TEST/
> > >
> > > God bless Mozilla
> > >
> > > http://www.mozilla.org/
> > >
> >
> >
> > Your test didn't work on my IESP1 under XP with all patches excepting
> > 811394. Absolutely no effect on WMP. My original WMP remains and works.
>
> It depends whether you were logging as a privileged user or not.
> If not, then your browser can't delete the wmplayer.exe file, because
> the only user that can change/delete the wmplayer.exe file is privileged
> user.
> C:\PROGRA~1\Windows Media Player>cacls wmplayer.exe
> C:\PROGRA~1\Windows Media Player\wmplayer.exe BUILTIN\Users:R
>                                               BUILTIN\Power Users:C
>                                               BUILTIN\Administrators:F
>                                               NT AUTHORITY\SYSTEM:F
>
>
> C:\PROGRA~1\Windows Media Player>
>
> The problem is just too many people are running their Windows with
> Full Privileges.
>


Didnt matter what I logged in as. I normally am ADMIN, naturally but a
priveleged user, a very limited user - no difference. The exploit didnt
work.

Greg.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html