Following along the lines of C2 orangebook being absolutely useless,
there is an alleged security flaw with NT4 and possibly 3.5x that allows
a remote user to change the administrator password with no
authenticaction whatsoever.
I don't have the details for this so don't ask, but you might want to
look at RPC and the Win32 api...
I am puzzled as to why Microsoft is keeping mum about this, but if
you do find the problem and call them to confirm it, they will.
Keith McCammon
MIS Analyst
Asymetrix Corp
*Opinions Are My Own*
|
|
