News for hackers. Stuff that matters.

A comment on Security researchers 'destroy' Microsoft ASP.NET security. Parent comment

Re:Security researchers 'destroy' Microsoft ASP.NET security by ergo98 on Friday September 17, 2010 @06:40PM (#1703071)
What do you mean by "local SYSTEM"?

I eagerly look forward to details on it. Where might I find them?

[ Parent | on HN ]
Re:Security researchers 'destroy' Microsoft ASP.NET security by brl on Friday September 17, 2010 @07:24PM (#1703168)
> What do you mean by "local SYSTEM"?

The highest system privilege level on Windows. They were able to interactively run CMD.EXE as the LocalSystem account on the remote web server.

> I eagerly look forward to details on it. Where might I find them?

The details were not disclosed until today when the attack was presented at a security conference. As far as I know there isn't anything available online yet, but that should change very soon.

[ Parent | on HN ]