DOCUMENT:Q243404 TITLE :WINOBJ.EXE May Let You View Securable Objects Created/Opened by JET500.DLL PRODUCT :Windows NT PROD/VER:4.0 OPER/SYS:WINDOWS NT KEYWORD :kbbug4.00 kbfix4.00 ------------------------------------------------------------------------------- The information in this article applies to: - Microsoft Windows NT Server version 4.0 - Microsoft Windows NT Server, Enterprise Edition version 4.0 - Microsoft Windows NT Workstation version 4.0 ------------------------------------------------------------------------------- SYMPTOMS ======== The following securable (event/semaphore/mutex) objects may exist on the system name space: - \BaseNameObjects\Proc Count:* (semaphore) - \BaseNamedObjects\Collect:* (semaphore) - \BaeNamedObjects\New Proc:* (mutex) - \BaeNamedObjects\Access:* (mutex) - \BaeNamedObjects\Done:* (event) If exist, they may be viewed using Microsoft Object Viewer (Winobj.exe). On Windows NT 4.0 Service Pack 6a and earlier, these objects have NULL Access Control Lists (ACL), meaning that everyone has all access to these objects. CAUSE ===== These objects are created and opened by Jet500.dll (JET Engine DLL) for synchronization purposes among instances of itself when they are loaded in different processes. Microsoft WINS and DHCP services use Jet500.dll. Jet500.dll provided in the C2 Update create the aforementioned events, semaphores, and mutexs with an Access Control Element (ACE) for admins. Specifically, only admins (DOMAIN_ALIAS_RID_ADMINS) are given GENERIC_ALL access. Others do not have WRITE_DAC or WRITE_OWNER access. RESOLUTION ========== The following files are available for download from the Microsoft Download Center or Microsoft's FTP site. Click the file names below to download the appropriate file: English: x86: Microsoft Download Center: Q244599i.exe (http://download.microsoft.com/download/winntsp/Patch/SP6a_C2/NT4/EN-US/Q244599i.exe) FTP: Q244599i.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe) Alpha: Microsoft Download Center: Q244599a.exe (http://download.microsoft.com/download/winntsp/Patch/SP6a_C2/ALPHA/EN-US/Q244599a.exe) FTP: Q244599a.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe) French: x86: FTP: Q244599i.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/frn/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe) Alpha: FTP: Q244599a.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/frn/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe) Spanish: x86: FTP: Q244599i.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/spa/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe) Alpha: FTP: Q244599a.exe (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/spa/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe) For more information about how to download files from the Microsoft Download Center, please visit the Download Center at the following Web address http://www.microsoft.com/downloads/search.asp and then click "How to use the Microsoft Download Center". The English version of this fix should have the following file attributes or later: Date Time Size File name Platform ------------------------------------------------ 10/13/1999 02:28p 458,512 Jet500.dll x86 10/13/1999 02:26p 698,640 Jet500.dll Alpha STATUS ====== Microsoft has confirmed this to be a problem in Windows NT 4.0. Additional query words: c2 security_patch ============================================================================ THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.