XP Exploit issue!

[Glut]

How do i prevent someone from doing this?

How to get System privileges in Windows XP using a limited account

-Open a command prompt,

-Then type at ##:## /interactive "cmd.exe" (##:## is time 24hrs. eg 5:30pm=17:30)

-When it gets to the time you specified, a new command prompt should open,

-So open the task manager (press CTRL+ALT+DEL or type taskmgr in command prompt) and end the "explorer.exe" process (Everything on the desktop will disappear, but the command prompt will stay),

-Then type explorer.exe (A new desktop should appear).

-And you now have System privileges.

Any thoughts on how to prevent someone from doing this?? Disabling the command prompt wont work neither will disabling the task manager. you can enable both from the registry.

 

[Ijack]

From Windows Help:

"By default only a Local Administrator can issue an AT command"

Great exploit, dude!

The answer is, if you don't trust your users then don't make them Administrators. Pretty simple stuff really.

 

[Glut]

thats the problem they dont have to be a administrator to get on the admin account. they just need access to the command prompt

 

[Ijack]

And the authority to run the "at" command - which an ordinary user doesn't have.