3 ms·
This is a vulnerability. This attack does not require physical access. Do you really think that startup repair mode is required to swap the position of cmd.exe
by dguido 12y ago
This is a vulnerability. This attack does not require physical access. Do you really think that startup repair mode is required to swap the position of cmd.exe and sethc.exe?
- Someone1234 12y agoThe Repair Tool requires unrestricted physical access, it is running as administrator. The same way that a Live CD could. > Do you really think that startup repair mode is required to swap the position of cmd.exe and sethc.exe? A Live CD/DVD would work just as well. As would a USB-based OS. You could also (although it would require more work) use network boot to run your own code. There's no vulnerability, this is unfixable, you just have to secure the system using full disk encryption and secure boot.
- x0n 12y agoNo, it's not, because sethc.exe resides in %systemroot%\system32 - an area that is protected by ACLs, only allowing regular users read access. Going into startup repair mode grants system-level access to files there. Without repair mode, users cannot swap these files.