Changes between Version 3 and Version 4 of Nonprivileged

Timestamp:

07/17/13 13:09:26 (11 years ago)

Author:

pcfreak

Comment:

--

Nonprivileged

@@ -350 +350 @@
 Since we changed the target for the OpenVPN-GUI shortcuts, the user can now already click the OpenVPN-GUI desktop icon, which will then run the scheduled task **win7x64_user1_openvpn** on demand. **win7x64_user1_openvpn** will then execute **openvpn-gui.exe** in the users context but with **highest privileges**.
 
+=== Security related information ===
+There are 2 registry keys, that are dangerous and can allow the user to open an administrative prompt on the machine. They are
+
+{{{
+HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI\editor
+and
+HKEY_LOCAL_MACHINE\SOFTWARE\OpenVPN-GUI\log_viewer
+}}}
+
+When using my method and click on ** View Log ** or ** Edit config **, by default notepad.exe will open (and of course) with highest privileges. To fix this, you should change the registry to an executable (you created), that shows an error message. I did this with a small AutoIT-Script, that does exactly that. I called it
+
+{{{
+notallowed.exe
+}}}
+The source is added to this Wiki page as
+
+{{{
+notallowed.au3
+}}}
+
+** Without this change your installation is vulnerable and normal users can get an elevated command prompt, so absolutely change this registry keys!!!! **
+
 === Future logons ===
 ==== Main scheduled task will execute ====