Description
WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory.
References
- serverlock-physicalmemory-symlink(12666) vdb-entry
- 8223 vdb-entry
- 20030717 Bypassing ServerLock protection on Windows 2000 mailing-list
- 9310 third-party-advisory