DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  Registry

SYSTEMS AFFECTED

  Win NT 3.5, 3.51, 4.0
  

PROBLEM


    This text and source ex NT pages by Bill Stout.

    Everyone has remote access to an NT systems' registry by default.

    NT 4.0 has a new registry key:

        <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg>

    If this key does not  exist, remote access is not  restricted, and
    only  the  underlying  security  on  the  individual  keys control
    access.



EXPLOIT

  

SOLUTION


    Make a key (for 4.0) or upgrade your software (others).