Microsoft KB Archive/243404

= Winobj.exe May Permit You to View Securable Objects Created or Opened by the Jet500.dll File =

Article ID: 243404

Article Last Modified on 11/1/2006

-

APPLIES TO


 * Microsoft Windows NT Server 4.0 Standard Edition
 * Microsoft Windows NT Server 4.0 Enterprise Edition
 * Microsoft Windows NT Workstation 4.0 Developer Edition

-



This article was previously published under Q243404



SYMPTOMS
The following securable (event/semaphore/mutex) objects may exist on the system name space:
 * \BaseNamedObjects\Proc Count:* (semaphore)
 * \BaseNamedObjects\Collect:* (semaphore)
 * \BaseNamedObjects\New Proc:* (mutex)
 * \BaseNamedObjects\Access:* (mutex)
 * \BaseNamedObjects\Done:* (event)

If these objects exist, they may be viewed by using Microsoft Object Viewer (Winobj.exe). In Windows NT 4.0 Service Pack 6a and earlier, these objects have NULL Access Control Lists (ACL), meaning that everyone has all access to these objects.



CAUSE
These objects are created and opened by Jet500.dll (the JET Engine .dll file) for synchronization purposes among instances of itself when they are loaded in different processes. Microsoft WINS and DHCP services use Jet500.dll.

The Jet500.dll file described in the following article in the Microsoft Knowledge Base creates the aforementioned events, semaphores, and mutexs with an Access Control Element (ACE) for administrators:

244599 Fixes Required in TCSEC C2 Security Evaluation Configuration for Windows NT 4.0 Service Pack 6a

Specifically, only administrators (DOMAIN_ALIAS_RID_ADMINS) are given GENERIC_ALL access. Others do not have WRITE_DAC or WRITE_OWNER access.



RESOLUTION
The following files are available for download from the Microsoft Download Center or Microsoft's FTP site. Click the file names below to download the appropriate file:

English
x86:

Microsoft Download Center: Download Q244599i.exe now

FTP: Download Q244599i.exe now

Alpha:

Microsoft Download Center: Download Q244599a.exe now

FTP: Download Q244599a.exe now

French
x86: FTP: Download Q244599i.exe nowAlpha: FTP: Download Q244599a.exe now

Spanish
x86: FTP: Download Q244599i.exe nowAlpha: FTP: Download Q244599a.exe now For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version of this fix should have the following file attributes or later:

  Date        Time      Size   File name   Platform 10/13/1999 02:28p  458,512  Jet500.dll  x86 10/13/1999 02:26p  698,640  Jet500.dll  Alpha



STATUS
Microsoft has confirmed that this is a problem in Windows NT 4.0.

Additional query words: c2 security_patch

Keywords: kbdownload kbfix kbgraphxlinkcritical kbprb kbqfe KB243404

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.