VULHUB ™

The Internet Explorer 5 Offline Browsing Pack includes the Task Scheduler utility. This program is similar to the NT AT service, and on NT systems, it replaces the AT service. The Task Scheduler will allow unauthorized users to create AT jobs by modifying an existing, administrator-owned file and placing it into the %systemroot%\tasks folder. This vulnerability could only be exploited remotely if the tasks folder was specifically shared, or through the default C$ share on NT. Task Scheduler can be made to use any other arbitrary folder by editing the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent\TasksFolder (Changes will not take effect until after the target has been rebooted.) The IE5 Offline Browsing Pack ships with IE5, but is not installed by default.

The Internet Explorer 5 Offline Browsing Pack includes the Task Scheduler utility. This program is similar to the NT AT service, and on NT systems, it replaces the AT service. The Task Scheduler will allow unauthorized users to create AT jobs by modifying an existing, administrator-owned file and placing it into the %systemroot%\tasks folder. This vulnerability could only be exploited remotely if the tasks folder was specifically shared, or through the default C$ share on NT. Task Scheduler can be made to use any other arbitrary folder by editing the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent\TasksFolder (Changes will not take effect until after the target has been rebooted.) The IE5 Offline Browsing Pack ships with IE5, but is not installed by default.