DOCUMENT:Q243404
TITLE   :WINOBJ.EXE May Let You View Securable Objects Created/Opened by JET500.DLL
PRODUCT :Windows NT
PROD/VER:4.0
OPER/SYS:WINDOWS NT
KEYWORD :kbbug4.00 kbfix4.00 

-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Windows NT Server version 4.0 
 - Microsoft Windows NT Server, Enterprise Edition version 4.0 
 - Microsoft Windows NT Workstation version 4.0 
-------------------------------------------------------------------------------

SYMPTOMS
========

The following securable (event/semaphore/mutex) objects may exist on the system
name space:

 - \BaseNameObjects\Proc Count:* (semaphore)

 - \BaseNamedObjects\Collect:* (semaphore)

 - \BaeNamedObjects\New Proc:* (mutex)

 - \BaeNamedObjects\Access:* (mutex)

 - \BaeNamedObjects\Done:* (event)

If exist, they may be viewed using Microsoft Object Viewer (Winobj.exe). On
Windows NT 4.0 Service Pack 6a and earlier, these objects have NULL Access
Control Lists (ACL), meaning that everyone has all access to these objects.

CAUSE
=====

These objects are created and opened by Jet500.dll (JET Engine DLL) for
synchronization purposes among instances of itself when they are loaded in
different processes. Microsoft WINS and DHCP services use Jet500.dll.

Jet500.dll provided in the C2 Update create the aforementioned events,
semaphores, and mutexs with an Access Control Element (ACE) for admins.
Specifically, only admins (DOMAIN_ALIAS_RID_ADMINS) are given GENERIC_ALL
access. Others do not have WRITE_DAC or WRITE_OWNER access.

RESOLUTION
==========

The following files are available for download from the Microsoft Download Center
or Microsoft's FTP site. Click the file names below to download the appropriate
file:

English:

   x86:

   Microsoft Download Center: Q244599i.exe
   (http://download.microsoft.com/download/winntsp/Patch/SP6a_C2/NT4/EN-US/Q244599i.exe)

   FTP: Q244599i.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe)

   Alpha:

   Microsoft Download Center: Q244599a.exe
   (http://download.microsoft.com/download/winntsp/Patch/SP6a_C2/ALPHA/EN-US/Q244599a.exe)

   FTP: Q244599a.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe)

French:

   x86:

   FTP: Q244599i.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/frn/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe)

   Alpha:

   FTP: Q244599a.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/frn/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe)

Spanish:

   x86:

   FTP: Q244599i.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/spa/nt40/hotfixes-postsp6a/c2-fix/Q244599i.exe)

   Alpha:

   FTP: Q244599a.exe
   (ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/spa/nt40/hotfixes-postsp6a/c2-fix/Q244599a.exe)

For more information about how to download files from the Microsoft Download
Center, please visit the Download Center at the following Web address

   http://www.microsoft.com/downloads/search.asp

and then click "How to use the Microsoft Download Center".

The English version of this fix should have the following file attributes or
later:

   Date        Time      Size   File name   Platform
   ------------------------------------------------
   10/13/1999  02:28p  458,512  Jet500.dll  x86
   10/13/1999  02:26p  698,640  Jet500.dll  Alpha

STATUS
======

Microsoft has confirmed this to be a problem in Windows NT 4.0.

Additional query words: c2 security_patch
============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.