VULHUB ™

Microsoft Windows XP offers a fast user switching feature that lets users quickly change accounts without logging off and logging on again. This service, in conjuction with the account lockout feature, can be used to lock all unprivileged users out of their accounts, without knowledge of other user account names. On machines with fast user switching and an account lockout threshold set (for invalid login attempts) a single user can use the fast switching feature to cycle to the same user account (i.e., fast switch to self) multiple times, resulting in a lockout of all users other than administrator.

Microsoft Windows XP offers a fast user switching feature that lets users quickly change accounts without logging off and logging on again. This service, in conjuction with the account lockout feature, can be used to lock all unprivileged users out of their accounts, without knowledge of other user account names. On machines with fast user switching and an account lockout threshold set (for invalid login attempts) a single user can use the fast switching feature to cycle to the same user account (i.e., fast switch to self) multiple times, resulting in a lockout of all users other than administrator.