Page 1 of 1

Gaining System-Level Access To Vista

Posted: Mon May 26, 2008 8:41 pm
by Istik
http://www.offensive-security.com/movie ... ahack.html
This video shows a method by which a user can use a Linux distro called BackTrack to gain system access to Windows Vista without logging into Windows or knowing the username or password for any accounts. To accomplish this, the user renames cmd.exe to Utilman.exe — this is the program that brings up the Accessibility options for users without sight or with limited vision. The attack takes advantage of the fact that the Utility Manager can be invoked before the user logs into the system. The user gains System access, which is a level higher than Administrator. The person who discovered this security hole claims that XP, 2000, 2003 and NT are not vulnerable to it; only Windows Vista is."
lol. Great security in Vista...

http://tech.slashdot.org/article.pl?sid ... 26/0257213

Some comments mention that bitlocker will prevent this, but I thought bitlocker was only on the more expensive versions of Vista.