Knowledge Base

Winobj.exe May Permit You to View Securable Objects Created or Opened by the Jet500.dll File

Article ID: 243404

Article Last Modified on 11/1/2006

APPLIES TO

Microsoft Windows NT Server 4.0 Standard Edition
Microsoft Windows NT Server 4.0 Enterprise Edition
Microsoft Windows NT Workstation 4.0 Developer Edition

This article was previously published under Q243404

SYMPTOMS

The following securable (event/semaphore/mutex) objects may exist on the system name space:

\BaseNamedObjects\Proc Count:* (semaphore)
\BaseNamedObjects\Collect:* (semaphore)
\BaseNamedObjects\New Proc:* (mutex)
\BaseNamedObjects\Access:* (mutex)
\BaseNamedObjects\Done:* (event)

If these objects exist, they may be viewed by using Microsoft Object Viewer (Winobj.exe). In Windows NT 4.0 Service Pack 6a and earlier, these objects have NULL Access Control Lists (ACL), meaning that everyone has all access to these objects.

CAUSE

These objects are created and opened by Jet500.dll (the JET Engine .dll file) for synchronization purposes among instances of itself when they are loaded in different processes. Microsoft WINS and DHCP services use Jet500.dll.

The Jet500.dll file described in the following article in the Microsoft Knowledge Base creates the aforementioned events, semaphores, and mutexs with an Access Control Element (ACE) for administrators:

244599 Fixes Required in TCSEC C2 Security Evaluation Configuration for Windows NT 4.0 Service Pack 6a

Specifically, only administrators (DOMAIN_ALIAS_RID_ADMINS) are given GENERIC_ALL access. Others do not have WRITE_DAC or WRITE_OWNER access.

RESOLUTION

The following files are available for download from the Microsoft Download Center or Microsoft's FTP site. Click the file names below to download the appropriate file:

English

x86:

Microsoft Download Center: Download Q244599i.exe now

FTP: Download Q244599i.exe now

Alpha:

Microsoft Download Center: Download Q244599a.exe now

FTP: Download Q244599a.exe now

French

x86: FTP: Download Q244599i.exe nowAlpha: FTP: Download Q244599a.exe now

Spanish

x86: FTP: Download Q244599i.exe nowAlpha: FTP: Download Q244599a.exe now For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. The English version of this fix should have the following file attributes or later:

   Date        Time      Size   File name   Platform
   ------------------------------------------------
   10/13/1999  02:28p  458,512  Jet500.dll  x86
   10/13/1999  02:26p  698,640  Jet500.dll  Alpha

STATUS

Microsoft has confirmed that this is a problem in Windows NT 4.0.

Additional query words: c2 security_patch

Keywords: kbdownload kbfix kbgraphxlinkcritical kbprb kbqfe KB243404

Microsoft KB Archive/243404

Contents