The Weakness of Windows Impersonation Model
<http://www.gentlesecurity.com/04302006.html>
Summary
1. Network Service account?s context is elevated to LocalSystem.
2. A context of MS SQL service running as unique user account is
elevated up to LocalSystem.
3. Any service?s context could be elevated...
<http://www.gentlesecurity.com/04302006.html>
Summary
1. Network Service account?s context is elevated to LocalSystem.
2. A context of MS SQL service running as unique user account is
elevated up to LocalSystem.
3. Any service?s context could be elevated...
[ more ]