Windows : SMB Registry : permissions of HKLM

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.10427

Category: Windows

Title: SMB Registry : permissions of HKLM

Summary: NOSUMMARY

Description: Description:

The registry key HKEY_LOCAL_MACHINE
is writeable by users who are not in the admin group.

This allows these users to create a lot of keys on
that machine, thus they can probably to get admin easily.

Such a configuration probably means that the system
has been compromised.

Solution : use regedt32 and set the permissions of this
key to :

- admin group : Full Control
- system : Full Control
- everyone : Read

Risk factor : High

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-1999-0589
https://www.cve.org/CVERecord?id=CVE-1999-0589

Copyright This script is Copyright (C) 2000 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.10427
Category:	Windows
Title:	SMB Registry : permissions of HKLM
Summary:	NOSUMMARY
Description:	Description: The registry key HKEY_LOCAL_MACHINE is writeable by users who are not in the admin group. This allows these users to create a lot of keys on that machine, thus they can probably to get admin easily. Such a configuration probably means that the system has been compromised. Solution : use regedt32 and set the permissions of this key to : - admin group : Full Control - system : Full Control - everyone : Read Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0589 https://www.cve.org/CVERecord?id=CVE-1999-0589
Copyright	This script is Copyright (C) 2000 Renaud Deraison