The Butler did it…in my office…with an open window. GSEC Practical Requirements (v1.4b) (August 2002)

This paper is from the SANS Institute Reading Room site. Reposting is not permitted without express written permission. Managing vulnerabilities exposed by Windows services. The intent of this document is to identify the vulnerabilities exposed by the Windows services, and to learn how to secure "The House of Windows " from these vulnerabilities. For the purposes of our discussion we will be primarily focusing on the Windows XP Professional and Windows 2000 operating systems. As the newest of the Microsoft "business " class operating systems, Windows XP and Windows 2000 have the widest variety of tools, and available settings to manipulate a service into an exposure. That is not to say that..