RSS Feed

TYPSoft FTP Denial of Service

Thu, 04/30/2009 - 21:44 — victor
Name: 
Access to SysLog via NetBios
Filename: 
netbioscheck29.c
SPID: 
2578
Impact: 
It is possible on the remote windows system for any local user to access the system log. Only Administrators should be able to access this log. Any user with Guest accounts can be able to this and viewing the log can be valueable information for an attacker.
Solution: 
To restrict the viewing of the System Log to just administrators set the following key: Hive: HKEY_LOCAL_MACHINE Path: SystemCurrentControlSetServicesEventLogSystem Key: RestrictGuestAccess Type: REG_DWORD Value: 1 )
Risk: 
Medium