Changes

Jump to navigation Jump to search
it's more than just access.
Line 111: Line 111:  
|-
 
|-
 
| Arbitrary service handle forging
 
| Arbitrary service handle forging
| Prior to [[3.0.1]], the service manager ("sm") built-in system module could provide valid handles for any [[Services_API|service]] if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].
+
| Prior to [[3.0.1]], the service manager ("sm") built-in system module treats a user as though it has full permissions if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].
 
In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.
 
In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.
| Access to any service
+
| Acquisition, registering, and unregistering of arbitrary services
 
| [[3.0.1]]
 
| [[3.0.1]]
 
| [[3.0.1]]
 
| [[3.0.1]]

Navigation menu