|
|
|
|
|
|
|
| |
SMB LsaQueryInformationPolicy Function SID Enumeration |
|
| This script is Copyright (C) 2005-2010 Tenable Network Security, Inc. |
|
|
| Family | Windows |
| Nessus Plugin ID | 10859 (smb_host2sid.nasl) |
| Bugtraq ID | 959
|
| CVE ID | CVE-2000-1200
|
|
| Description: |
Synopsis :
It is possible to obtain the host SID for the remote host.
Description :
By emulating the call to LsaQueryInformationPolicy(), it was possible
to obtain the host SID (Security Identifier).
The host SID can then be used to get the list of local users.
See also :
http://technet.microsoft.com/en-us/library/bb418944.aspx
Solution :
You can prevent anonymous lookups of the host SID by setting the
'RestrictAnonymous' registry setting to an appropriate value.
Refer to the 'See also' section for guidance.
Risk factor :
None
|
|
|
|
|
|
