Description
The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information.
References
- 20010323 NT crash dump files insecure by default mailing-list
- 2501 vdb-entry
- 5683 vdb-entry
- win-userdmp-insecure-permission(6275) vdb-entry