RE: [Full-disclosure] annoying bug in Windows XP

From: joe (mvp_at_joeware.net)
Date: 10/16/05

  • Next message: Tim: "Re: [Full-disclosure] Mozilla Thunderbird SMTP down-negotiation weakness" 
    To: <full-disclosure@lists.grok.org.uk>
Date: Sun, 16 Oct 2005 08:53:18 -0400

    Yep it is a documented function. It is due to the implementation of
    FindFirstFile which searches both long file names and short file names.
     
    See Remarks in
     
    http://msdn.microsoft.com/library/default.asp?url=/library/en-us/fileio/fs/f
    indfirstfile.asp
     
     
       joe
     

      _____

    From: full-disclosure-bounces@lists.grok.org.uk
    [mailto:full-disclosure-bounces@lists.grok.org.uk] On Behalf Of Native.Code
    Sent: Sunday, October 16, 2005 5:15 AM
    To: full-disclosure@lists.grok.org.uk
    Subject: Re: [Full-disclosure] annoying bug in Windows XP

    I won't say it is bug. It is expected behavior in 8.3 filesystem. Anyone who
    has used Windows over a year knows this behavior.

    On 10/16/05, Poof <poof@fansubber.com> wrote:

    Yes, this occurs since you're just using the 8+3 filesystem with long
    filenames. If you'll notice:

    File1.jav shows as just that. While File1.java shows as File1~1.jav
    (It usually hides the non-LFN tree with default dir flags. I don't remember
    how to get it to show it all at this time.)

    ~

    -----Original Message-----
    From: full-disclosure-bounces@lists.grok.org.uk
    [mailto:full-disclosure-bounces@lists.grok.org.uk
    <mailto:full-disclosure-bounces@lists.grok.org.uk> ] On Behalf Of Frank
    Dietrich
    Sent: Sunday, October 16, 2005 1:25 AM
    To: full-disclosure@lists.grok.org.uk
    Subject: [Full-disclosure] annoying bug in Windows XP

    Hi to all readers,

    this day I found a annoying misbehavior in Windows XP professional
    with SP2.

    I had a directory with some Java sources (*.java) and some backup
    files (*.jav). Because I din't longer need the backup files I would
    delete them with 'del *.jav'. But this command also delete all the
    source files. #§%*. The last backup was 4 hours ago. :-/

    So I tried what happen and the result is the command above checks
    only the first three chars from the extension (DOS is alive).

    Here is how you can reproduce it:

    mkdir testbug
    cd testbug
    rem.>file1.jav
    rem.>file2.java
    rem.>file3.javas
    del *.jav

    All three files are deleted. Is this a known bug or a unknown feature?

    Frank 

    --
21 is only half the truth
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
<http://lists.grok.org.uk/full-disclosure-charter.html> 
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.grok.org.uk/full-disclosure-charter.html
    Hosted and sponsored by Secunia - http://secunia.com/

  • Next message: Tim: "Re: [Full-disclosure] Mozilla Thunderbird SMTP down-negotiation weakness"

    Relevant Pages

    • RE: [Full-disclosure] Defeating Citi-Bank Virtual Keyboard Protection
      ... Enumerate all the IE windows and look for the one with CitiBank Login ... when 2 Australian banks launched on-screen keypads. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
      (Full-Disclosure)
    • Re: [Full-disclosure] Save XP
      ... If you have any concrete arguments in defense of Windows based operating ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
      (Full-Disclosure)
    • Re: [Full-disclosure] 0day for sell
      ... Windows, and many other vulnerabilities. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
      (Full-Disclosure)
    • Re: [Full-disclosure] strange domain name in phishing email
      ... Windows XP IE 6, web server is Apache on Windows 2003, does ... Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
      (Full-Disclosure)
    • Virtually every Windows PC at risk, says Secunia
      ... Virtually every Windows PC at risk, ... According to Secunia APS, 98.1% of the PCs on which its Personal ... Software Inspector (PSI) utility was installed during the past week ...
      (comp.sys.mac.advocacy)