Windows : SMB Registry : permissions of Schedule

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.10426

Category: Windows

Title: SMB Registry : permissions of Schedule

Summary: NOSUMMARY

Description: Description:

The registry key SYSTEM\CurrentControlSet\Services\Schedule
is writeable by users who are not in the admin group.

Since the scheduler runs with SYSTEM privileges, this
allow a malicious user to gain these privileges on this
system.

Solution : use regedt32 and set the permissions of this
key to :

- admin group : Full Control
- system : Full Control
- everyone : Read

Risk factor : High

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-1999-0589
https://www.cve.org/CVERecord?id=CVE-1999-0589

Copyright This script is Copyright (C) 2000 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.10426
Category:	Windows
Title:	SMB Registry : permissions of Schedule
Summary:	NOSUMMARY
Description:	Description: The registry key SYSTEM\CurrentControlSet\Services\Schedule is writeable by users who are not in the admin group. Since the scheduler runs with SYSTEM privileges, this allow a malicious user to gain these privileges on this system. Solution : use regedt32 and set the permissions of this key to : - admin group : Full Control - system : Full Control - everyone : Read Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0589 https://www.cve.org/CVERecord?id=CVE-1999-0589
Copyright	This script is Copyright (C) 2000 Renaud Deraison