Non-administrators can shut down Windows XP SP1 thru TSShutdn.exe (889323)
Medium Nessus Plugin ID 17607
SynopsisIt is possible to shutdown the remote host.
DescriptionThe version of Microsoft Windows XP SP1 on the remote host is missing security update KB889323. A non-administrative user can remotely shut down the remote host by using the TSShutdn.exe command.
SolutionMicrosoft has released a set of patches for Windows XP.