Microsoft Windows SMB Registry : Schedule Key Permission Weakness Local Privilege Escalation

The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-1999-0589

CVE-1999-0589 is associated with insecure permissions on system-critical Windows NT registry keys. Connected advisories identify multiple registry keys that are writable by non-admin users, enabling potential privilege escalation to SYSTEM: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlog...