DT schrieb am 15. April 2009 09:36
[Registry-Einträge nach KB956572]
> Wieso kann das Patch dies nicht automatisch machen?!
> http://www.microsoft.com/technet/security/bulletin/ms09-012.mspx
FAQ ->
<quote>
Does this update contain any security-related changes to
functionality?
Yes. Besides the changes that are listed in the Vulnerability
Information section of this bulletin, this security update also
provides an infrastructure to isolate and secure services. In Windows
XP and Windows Server 2003, all processes running under the context
of a single account will have full control over each other. This
update provides *third parties* the ability to isolate and secure
their services that hold SYSTEM tokens and run under the
NetworkService or LocalService accounts. For more information on the
usage of this registry key, see Microsoft Knowledge Base Article
956572.
</quote>
> http://blogs.technet.com/srd/archive/2009/04/14/ms09-012-fixing-token-kidnapping.aspx
-> Background
<quote>
The changes made were in sensitive parts of the OS which required
some delicate re-architecture work to avoid application compatibility
issues, which took a long time to plan and develop. Then we wanted to
be absolutely sure we wouldn’t break anything after changing these
core pieces of the Windows architecture so this update went through
rigorous testing to iron out the issues testing uncovered. Only now
is it finally ready to be released.
</quote>
Egal wie sie es machen, sie machen es eh nicht allen recht,
Freudi
[Registry-Einträge nach KB956572]
> Wieso kann das Patch dies nicht automatisch machen?!
> http://www.microsoft.com/technet/security/bulletin/ms09-012.mspx
FAQ ->
<quote>
Does this update contain any security-related changes to
functionality?
Yes. Besides the changes that are listed in the Vulnerability
Information section of this bulletin, this security update also
provides an infrastructure to isolate and secure services. In Windows
XP and Windows Server 2003, all processes running under the context
of a single account will have full control over each other. This
update provides *third parties* the ability to isolate and secure
their services that hold SYSTEM tokens and run under the
NetworkService or LocalService accounts. For more information on the
usage of this registry key, see Microsoft Knowledge Base Article
956572.
</quote>
> http://blogs.technet.com/srd/archive/2009/04/14/ms09-012-fixing-token-kidnapping.aspx
-> Background
<quote>
The changes made were in sensitive parts of the OS which required
some delicate re-architecture work to avoid application compatibility
issues, which took a long time to plan and develop. Then we wanted to
be absolutely sure we wouldn’t break anything after changing these
core pieces of the Windows architecture so this update went through
rigorous testing to iron out the issues testing uncovered. Only now
is it finally ready to be released.
</quote>
Egal wie sie es machen, sie machen es eh nicht allen recht,
Freudi