Article ID: 303628 - Last Review: March 2, 2007 - Revision: 2.2

Relative Path Issue Can Allow Program to Be Run Under the System Context

View products that this article applies to.

This article was previously published under Q303628

SYMPTOMS

A domain user could potentially run a process under the System context if the program file is renamed as a screen saver file in the root folder of the system drive. System must have Read rights to the folder under which the process is renamed.

Back to the top

RESOLUTION

Windows NT 4.0

To resolve this problem, obtain the Windows NT 4.0 Security Rollup Package. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

299444 (http://support.microsoft.com/kb/299444/EN-US/ ) Post-Windows NT 4.0 Service Pack 6a Security Rollup Package (SRP)

Back to the top

Microsoft Windows NT Server version 4.0, Terminal Server Edition

To resolve this problem, obtain the Windows NT Server 4.0, Terminal Server Edition, Security Rollup Package (SRP). For additional information about the SRP, click the article number below to view the article in the Microsoft Knowledge Base:

317636 (http://support.microsoft.com/kb/317636/EN-US/ ) Windows NT Server 4.0, TerminalServer Edition, Security Rollup Package

Back to the top

STATUS

Microsoft has confirmed that this problem may cause a degree of security vulnerability in Microsoft Windows NT 4.0 and Windows NT Server version 4.0, Terminal Server Edition.

Back to the top