thedark Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
Posted: Sat Jul 30, 2005 3:25 pm Post subject: Windows 2000 Default Permissions Could Allow Trojan Horse Pr |
|
|
On Windows 2000, the default permissions provide the Everyone group with Full access (Everyone:F) on the system root folder (typically, C:\). In most cases, the system root is not in the search path. However, under certain conditions – for instance, during logon or when applications are invoked directly from the Windows desktop via Start | Run – it can be.
Solution:
Set permissions to remove vulnerability. The default permissions for Windows XP can serve as a guide for a set of permissions which have been thoroughly designed and tested. The default permissions for the root directory on the system drive for Windows XP are:
Administrators: Full (This Folder, Subfolder and Files)
Creators Owners: Full (Subfolders and Files)
System: Full (This Folder, Subfolder and Files)
Everyone: Read and Execute (This Folder Only) |
|