Home | Resource Guides | Tech Tips | Network Administration | Certification

Tech Tips › Windows NT › Security

Tech Tips / Windows NT / Security

Another possible security leak

As all good network admins know, an Emergency Repair Disk is an absolute necessity and you, of course, frequently create one using the Rdisk utility from the command line. However, there's a possible security vulnerability if the ERD creation process is interrupted. During the creation process, a temporary file is created that lists all of the registry hives and their current settings. The permissions on this file don't prevent anyone from reading or changing the temporary file's contents while Rdisk is running.

When the Rdisk tool completes the update procedure, the temporary file is deleted. However, if the Rdisk tool is interrupted or ends abnormally (requiring a restart), the file may still be accessed after the computer is rebooted. The file can also be read while the Rdisk tool is running.

Microsoft has released a hot fix for this security breach, a mere 129-KB download called RDISK Registry Enumeration File Vulnerability (filename Q249108i.exe). Better safe than sorry!