List Info

Thread: PCWorks: Vulnerability Windows Vista User Information Disclosure




PCWorks: Vulnerability Windows Vista User Information Disclosure
country flaguser name
United States
2007-06-13 09:37:07
TITLE:
Microsoft Windows Vista User Information Disclosure

SECUNIA ADVISORY ID:
SA25623

VERIFY ADVISORY:
http://secunia.c
om/advisories/25623/

CRITICAL:
Less critical

IMPACT:
Exposure of sensitive information

WHERE:
Local system

OPERATING SYSTEM:
Microsoft Windows Vista
http://secunia.com/
product/13223/

DESCRIPTION:
A security issue has been reported in Microsoft Windows
Vista, 
which
can be exploited by malicious, local users to gain knowledge
of
sensitive information.

The security issue is caused due to certain user information

data
being stored in the registry and the local file system with

insecure
permissions. This can be exploited to disclose local user 
information
(e.g. administrative passwords).

SOLUTION:
Apply patches.

Windows Vista:
http://www.microsof
t.com/downloads/details.aspx?FamilyId=cdf79d00-6f34-404b-8ad
5-a2801ff35443

Windows Vista x64 Edition:
http://www.microsof
t.com/downloads/details.aspx?FamilyId=89dde3f4-4123-4c97-86d
8-00a83462c34b

ORIGINAL ADVISORY:
MS07-032 (KB931213):
http://www.microsoft.com/technet/security/bullet
in/ms07-032.mspx
============= PCWorks Mailing List =================
Don't see your post? Check our posting guidelines &
make sure you've followed proper posting procedures,
http://pcworkers.com/r
ules.htm
Contact list owner <owner-pcworksimagicomm.com>
Unsubscribing and other changes: http://pcworkers.com
=====================================================

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )