Laszlo Toth has discovered a security issue in Windows XP, which can be exploited by malicious, local users to gain access to certain sensitive information.

The security issue is caused due to the Wireless Zero Configuration service allowing a non-privileged user to retrieve the configured wireless profiles using the "WZCQueryInterface()" API. The retrieved profile includes the configured SSIDs and WEP keys, or the PMK (Pairwise Master Key) that is used for pre-shared key authentication in WPA (Wi-Fi Protected Access).

The security issue has been confirmed in Windows XP SP2 with KB893357 installed.

Solution
The security issue reportedly will be fixed in Longhorn.
Further details available to Secunia VIM customers

Provided and/or discovered by
Laszlo Toth

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.soonerorlater.hu/index.khtml?article_id=62

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers