[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Full-Disclosure] Re: Remote root exploit for mod_gzip (with debug_mode)



On Thu, 2003-11-20 at 17:31, Schmehl, Paul L wrote:
> > What user does apache run as under windows deployments?
> > 
> LOCALSYSTEM, which has no network privileges.


But in the past you have been able to use LOCALSYSTEM to create/edit an
account with Administrator privileges which you can then use to gain
network access. Your comment sounds like LOCALSYSTEM is harmless, and I
believe that is a wrong statement.

Cheers,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part