user profile authorities article
Brian Lewis <brian-3Ar9U86/[email protected]> Fri, 16 Feb 2007 08:02:59 -0600
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
I have written a short article about improper authorities on user profiles that may allow privilege escalation via the QSYGETPH and QWTSETP APIs. http://www.i5sec.com/articles/finding-dangerous-user-profile-authorities.html Any feedback would be appreciated. -- Brian Lewis http://www.i5sec.com/ _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.