, 2004-12-20
How a seemingly simply Microsoft bug betrayed its author's disdain for a wide range of secure coding principles.
Expand all |
Post comment
Security Holes That Run Deep
2004-12-20
Anonymous (2 replies)
Anonymous (2 replies)

Simple! Use a Linux machine to acccess a file share using SMB. No matter what user account is used to validate the loggin the linux machine gets the NTFS permission set to the user account "System", which grants better access to files than any administrator account. Ever set the NTFS permissions to block System and see what happens?
NTFS is a joke!
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/285/29679#29679