RE: directory traversal

From: Colby Marks (Colbyat_private)
Date: Thu Feb 07 2002 - 20:44:26 PST

  • Next message: Peter Bieringer: "Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA)" 

    One other interesting operation, changing successfully to a path on
another drive does not bring back the functionality i.e.:

C:\WINNT\system32>cd \.........\

C:\>cd winnt\system32
The system cannot find the path specified.

C:\>cd /d d:\temp

D:\TEMP>C:

C:\>cd winnt\system32
The system cannot find the path specified.

And it seems to work fine in my WinXP Pro (fresh install).

-Colby

-----Original Message-----
From: Robert Collins [mailto:robert.collinsat_private] 
Sent: Thursday, February 07, 2002 7:59 PM
To: E M; pvagarwalat_private; jlevenglickat_private;
jnanneyat_private; vuln-devat_private
Cc: vuln-devat_private
Subject: Re: directory traversal

----- Original Message -----
From: "E M" <rdnktrkat_private>
To: <robert.collinsat_private>; <pvagarwalat_private>;
<jlevenglickat_private>; <jnanneyat_private>;
<vuln-devat_private>
Cc: <vuln-devat_private>
Sent: Friday, February 08, 2002 10:48 AM
Subject: Re: directory traversal


> This does not appear to work in XP.
>
> Eric M.

Strange...I'm running XP Pro.

Rob

    This archive was generated by hypermail 2b30 : Thu Feb 07 2002 - 21:30:19 PST