Microsoft Security Advisory (2491888): Vulnerability in Microsoft Malware Protection Engine Could Al


 
Thread Tools Search this Thread
Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2491888): Vulnerability in Microsoft Malware Protection Engine Could Al
# 1  
Old 03-08-2011
Microsoft Security Advisory (2491888): Vulnerability in Microsoft Malware Protection Engine Could Al

Revision Note: V1.1 (March 8, 2011): Revised advisory FAQ to announce updated version of the MSRT and added Forefront Security for Exchange Server to the list of non-affected software. Advisory Summary:Microsoft is releasing this security advisory to help ensure customers are aware that an update to the Microsoft Malware Protection Engine also addresses a security vulnerability reported to Microsoft. The update addresses a privately reported vulnerability that could allow elevation of privilege if the Microsoft Malware Protection Engine scans a system after an attacker with valid logon credentials has created a specially crafted registry key. An attacker who successfully exploited the vulnerability could gain the same user rights as the LocalSystem account. The vulnerability could not be exploited by anonymous users.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
PRDB.DB0(5)							AFS File Reference						       PRDB.DB0(5)

NAME
prdb.DB0, prdb.DBSYS1 - Contain the Protection Database and associated log DESCRIPTION
The prdb.DB0 file contains the Protection Database, which maps AFS user, machine, and group names to their respective IDs (AFS UIDs and GIDs) and tracks group memberships. The Protection Server (ptserver process) uses the information in the database to help the File Server grant data access to authorized users. The prdb.DBSYS1 file is a log file in which the Protection Server logs each database operation before performing it. When an operation is interrupted, the Protection Server replays the log to complete the operation. Both files are in binary format and reside in the /var/lib/openafs/db directory on each of the cell's database server machines. When the Protection Server starts or restarts on a given machine, it establishes a connection with its peers and verifies that its copy of the database matches the copy on the other database server machines. If not, the Protection Servers call on AFS's distributed database technology, Ubik, to distribute to all of the machines the copy of the database with the highest version number. Always use the commands in the pts suite to administer the Protection Database. It is advisable to create an archive copy of the database on a regular basis, using a tool such as the UNIX tar command. SEE ALSO
prdb_check(8), pts(1), ptserver(8) COPYRIGHT
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved. This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell. OpenAFS 2012-03-26 PRDB.DB0(5)