DATE:  
COMMAND                                            SOURCE: 
                                                   AUTHOR: 
  Registry


SYSTEMS AFFECTED

  Win NT 3.5, 3.51, 4.0

  

PROBLEM


    This text and source ex NT pages by Bill Stout.



    Everyone has remote access to an NT systems' registry by default.



    NT 4.0 has a new registry key:



        <HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg>



    If this key does not  exist, remote access is not  restricted, and

    only  the  underlying  security  on  the  individual  keys control

    access.





EXPLOIT

  

SOLUTION


    Make a key (for 4.0) or upgrade your software (others).