Possible Windows Scheduler local privilige escalation



Sans has a writeup on Windows local privilige escalation using the Windows scheduler and among other things it might be worth starting out by saying that typically, only Administrative group users in Windows XP are allowed to access the Windows Scheduler. However, I have read reference of some installs that even give guests that capability. If that’s a default setting under some install profile – this is a big problem, if it’s just because the administrator chose to make the scheduler accessible to everyone it’s LESS of a problem, but still worth KNOWING about.


Essentially, the Scheduler runs processes with SYSTEM priviliges and so, if you use the scheduler to run cmd.exe you have a command shell with system priviliges. Now, if you’re already administrator, I’m not sure what greater havoc could be caused by having SYSTEM priviliges, however…. if you are an unpriviliged user that has access to the scheduler you can probably see where this can be a problem.

Really, you would expect that if you with admin priviliges schedule some program, that it would run with admin priviliges (not system…) so this is a problem of sorts. How big a problem depends on whether or not ANY user on the system has access to your scheduler.

Related Posts

Blog Traffic Exchange Related Posts
  • The end for Windows 98 may be a boost to linux? There are articles out about the demise of official Windows 98 and ME support would be a boost to linux uptake. Realistically, I suppose it may, but I personally am not holding my breath. Here's why. 1) The people still running Windows 98/ME are likely doing so because that's what......
  • Apple Mac OS X Not Accepting Login So, there it is an Apple Mac configured to auto login is now showing a Login screen and it doesn't seem to like any of the usernames and passwords that we could think of. In other words we're locked out. I haven't done an awful lot of Mac support, but......
  • Remote Tech Support using VNC (Ultravnc SC and x11vnc+wrapper script) Ok, some time back I'd done a writeup on UltraVNC SC, which is a nice customizable (windows version) VNC server that essentially let's someone doing remote support build their own downloadable .exe that runs and automatically tries to make a direct connection to a "listening" vnc viewer. It's good for......
Blog Traffic Exchange Related Websites
  • Improving Body Weight Trek Mountain Bikes Trek Mountain Bikes and Improving Body Weight - Thrilling but often tricky situations make mountain bike riding fun, especially when exploring various kinds of trail including sharp ascents and easy-going countryside. The environmentally friendly and health inspiring qualities of mountain biking mean that everyone is a winner. The mountain bike......
  • The Mental and Behavioral Aspects of Making Change We all know that making change in our lives is both mental and behavioral in nature. Research has shown that in order to make even the most basic changes in our lives, a four step process is involved. The steps are to be positive, add support, make a gesture and......
  • How to Replace Window Screens Windows screens may look tough, but many times they are all too fragile. One small tear can mean a house filled with bugs, but thankfully, it’s easy enough to fix them if you have the right tools. Here’s a quick guide to replacing and repairing window screens that anyone can......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site