Switch System Flaws: Difference between revisions
|  we are all dying af |  it's more than just access. | ||
| Line 111: | Line 111: | ||
| |- | |- | ||
| | Arbitrary service handle forging | | Arbitrary service handle forging | ||
| | Prior to [[3.0.1]], the service manager ("sm") built-in system module  | | Prior to [[3.0.1]], the service manager ("sm") built-in system module treats a user as though it has full permissions if the user creates a new "sm:" port session but bypasses [[Services_API#Initialize|initialization]]. | ||
| In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet. | In [[3.0.1]], "sm" returns error code 0x415 if [[Services_API#Initialize|Initialize]] has not been called yet. | ||
| |  | | Acquisition, registering, and unregistering of arbitrary services | ||
| | [[3.0.1]] | | [[3.0.1]] | ||
| | [[3.0.1]] | | [[3.0.1]] | ||