Switch System Flaws: Difference between revisions

we are all dying af
it's more than just access.
Line 111: Line 111:
|-
|-
| Arbitrary service handle forging
| Arbitrary service handle forging
| Prior to [[3.0.1]], the service manager ("sm") built-in system module could provide valid handles for any [[Services_API|service]] if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].
| Prior to [[3.0.1]], the service manager ("sm") built-in system module treats a user as though it has full permissions if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]].
In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.
In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet.
| Access to any service
| Acquisition, registering, and unregistering of arbitrary services
| [[3.0.1]]
| [[3.0.1]]
| [[3.0.1]]
| [[3.0.1]]