Re: Personal web server

From: Aleph One (aleph1at_private)
Date: Thu Jan 21 1999 - 12:03:57 PST

  • Next message: aleph1at_private: "Microsoft Security Bulletin (MS99-001)"

    Thanks to Xiaoyong Wu <xiaoyong_wuat_private> for pointing out more
    Windows weirdness.
    
    Under Windows NT 4.0 SP3:
    
    C:\> cd TEMP
    C:\TEMP> cd ...
    C:\TEMP> cd ....
    C:\TEMP> cd .....
    C:\TEMP>
    
    [ It seems NT interprets N+3 dots as '.' ]
    
    C:\TEMP> cd ..\
    C:\>
    
    [ It seems NT interprets '..\' as '..'. Makes sense as '\' is directory
      delimiter character for paths.  ]
    
    C:\TEMP> cd ...\
    C:\>
    C:\> cd TEMP
    C:\TEMP> cd ...\WINNT
    C:\WINNT>
    
    [ Whoa. Now NT interprets '...\' as '..'. Bad. Real bad. ]
    
    C:\TEMP> mkdir TEST
    C:\TEMP> cd TEST
    C:\TEMP\TEST> cd ...\
    The system cannot find the path specified.
    
    [ Hmm. But it doesn't work in directories more that one deep. ]
    
    C:\TEMP> cd ..\...\
    C:\>
    
    [ That figures. ]
    
    C:\TEMP\TEST> cd ..\...
    C:\TEMP> cd ....\
    C:\TEMP>
    
    [ Hmm. Now NT interprets '....\' as '..'. Weird. But wait it gets stranger. ]
    
    C:\> cd TEMP
    C:\TEMP> cd ....\
    C:\TEMP> cd ....\
    C:\>
    
    [ Huh? The first '....\'  as interpreted as '.' and the second as '..'.
      But... ]
    
    C:\> cd TEMP
    C:\TEMP> cd TEST
    C:\TEMP\TEST> cd ....\
    C:\TEMP\TEST> cd ....\
    The system cannot find the path specified.
    C:\TEMP\TEST> cd ..
    C:\TEMP\TEST> cd ..
    C:\TEMP>
    
    [ Now in a directory two levels deep the first '....\' is interpreted as '..'
      while the second one gives an error. The first '..' is interpreted as '.'
      while the second one works as normal. ]
    
    C:\TEMP> cd ....\
    C:\TEMP> cd TEST
    The system cannot find the path specified.
    C:\TEMP> cd .
    C:\TEMP> cd TEST
    C:\TEMP\TEST>
    
    [ It seems that '....\' also breaks trying to cd to subdirectories. ]
    
    The '....\' problems seems to appear for any such string with N+4 dots
    followed by a slash. I can only guess on the many other ways they
    may try to interpret pathnames.
    
    --
    Aleph One / aleph1at_private
    http://underground.org/
    KeyID 1024/948FD6B5
    Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:29:38 PDT