Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Sony strips Admin security with MediaMax

by TONI H Dec 22, 2005 8:21PM PST

http://www.eweek.com/article2/0,1895,1900281,00.asp

Isn't it nice to know that the supposedly "don't worry about this one" malware MediaMax program actually takes away Admin rights and puts the computer security into the hands of anybody who turns it on now?

>>>There are insecure default directory ACLs being set on the "SunnComm Shared" directory, which allow any local user full and total access to the directory. "So what?" you ask. Well, non-administrative users can modify the installed files in the directory because of this. If they are of a mind to do so, these users can potentially gain escalated privileges by (for example) replacing the MMX.exe program with a malicious (and privilege-escalating) program. The MMX.exe program will be automatically executed when another user inserts a MediaMax protected CD.

Changing the directory ACL manually is reportedly non-effective. The reason is that the insecure permissions will be restored the next time a MediaMax-protected CD is played.>>>>

I can hardly believe that Sony's heading to the cemetary and actually bringing their own shovel to make the job easier.

TONI

Discussion is locked

1 Posts

- Collapse + Expand Details

- Collapse -

Ashes to ashes.

by r. proffitt Former Forum moderator Dec 23, 2005 2:38AM PST

I have posted a few times about Sony's known and yet to be discovered DRM disasters. Sony will not reveal all the other attempts so I voted this year by not buying any Sony items.

-> Thank you for posting the new Mediamax discovery.

I still wonder if Sony PCs and Laptops have such preinstalled.

Bob

Back to Spyware, Viruses, & Security forum