Webtraversal in PCI Netsupport Manager (all version up to 7 using web extensions)

From: watcher60at_private
Date: Thu Mar 21 2002 - 16:40:06 PST

Next message: GreyMagic Software: "RE: Automatically opening IE + Executing attachments"

Previous message: 'ken'@FTU: "Gravity Storm Service Pack Manager 2000 Share Vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

('binary' encoding is not supported, stored as-is) It is possible to view and download files on machines running PCI Netsupport Manager (all version up to 7) that have the web extensions switched on (default port 80). This has only been tested on Windows NT 4 (server and workstation) and Windows 2000 (Pro , Server and Advanced server). Example on a standard version 5.5 install (location c:\nsm) the URL to view the boot.ini file in the root would be: http://machinename:relevant_port/../boot.ini version 6 +: http://machinename:relevant_port/../../boot.ini I have received confirmation from PCI that this bug is fixed in version 7 onwards Watcher60

Next message: GreyMagic Software: "RE: Automatically opening IE + Executing attachments"
Previous message: 'ken'@FTU: "Gravity Storm Service Pack Manager 2000 Share Vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Mar 22 2002 - 14:00:54 PST