Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: The Weakness of Windows Impersonation Model May 16 2006 10:17PM
David Litchfield (davidl ngssoftware com)
Hi Brian,
I wrote a paper on this subject last year, "Snagging Security Tokens to
Elevate Privileges" (http://www.databasesecurity.com/dbsec-briefs.htm) after
Tim Mullen and thrashed out a few details at Blackhat last year over a few
White Russians. The paper discusses the problem in the context ...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus