Test ID:	1.3.6.1.4.1.25623.1.0.10430
Category:	Windows
Title:	SMB Registry : permissions of keys that can lead to admin
Summary:	NOSUMMARY
Description:	Description: This script checks whether the following keys can be modified by non admins : HKLM\Software\Microsoft\Windows\CurrentVersion\Run HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options Solution : use regedt32 and set the permissions of this key to : - Admin group : Full Control - System : Full Control - Everyone : Read Make sure that 'Power Users' do not have any special privilege for this key. Risk factor : High
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0589 https://www.cve.org/CVERecord?id=CVE-1999-0589
Copyright	This script is Copyright (C) 2000 Renaud Deraison

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.