Long Filename in NT Makes File Unusable

From: Damian Profancik (dprofancik_at_HOTMAIL.COM)
Date: 06/12/03

  • Next message: David Arnstein: "811493 again and again" 
    Date:         Thu, 12 Jun 2003 09:21:30 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

           We are using policy files (ntuser.pol) for some of our NT users to
    restrict access on a terminal server. Windows adds a .tmp extension to the
    file when the roaming profile logs into both NT and 2000 machines. Windows
    suggests a fix for this at
    http://support.microsoft.com/default.aspx?kbid=271518. However, the problem
    I am having is removing one of the files that 2000 has added the .tmp
    extension to. The file is 226 characters in length (i.e.
    ntuser.pol.tmp.tmp.tmp… etc.). When I attempt to delete it off of a NT box
    from a 2000 or XP machine it won’t let me. Actually, I can’t do anything to
    it. I can’t view its properties (it give an error saying, “The properties
    for this item are not available.”), delete it, copy it, cut it, rename it
    (these actions just do nothing), or create a shortcut to it (it gives an
    error saying, “Windows could not create the shortcut. Check to see if the
    disk is full.”). I have also tried to remove it in DOS, but not even
    wildcard characters work. “del *.tmp” and “del ntuser~1.tmp” say that they
    can’t find any files by that name. Attempts to change the file’s attributes
    in DOS also fail. The security implications are the DoS potential if a
    world writeable drive is found. I have tried to create a file with a name
    of the same length, but it would only allow 224 characters on NT, 2000, or
    XP. The only way I was able to remove to 226 character-named file was to
    click on it twice, as if to rename it, then rename it and delete it.
    However, anytime I tried to delete the new file I created of 224 characters
    or even right-clicked on it, it crashed explorer with a Dr. Watson error. I
    thought Windows could handle filenames up to 256 characters. I was able to
    go back to the XP machine and delete the file I created. I am curious how
    the system created the 226 characters file.

    Damian Profancik

    _________________________________________________________________
    MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
    http://join.msn.com/?page=features/virus

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Delivery co-sponsored by TruSecure
    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo
    Free 14-day trial of New Threat & Vulnerability Notification Service

    TruSecure's new IntelliShield(tm) web-based threat and vulnerability
    service isn't your typical alert service. Supported by TruSecure's vast
    intelligence resources - including the ICSA Labs - IntelliShield's early
    warning, analysis, decision support, and threat management tools provide
    organizations with unmatched intelligence to better protect critical
    information assets. Experience it for yourself - just click below to begin
    your free, no obligation 14-day trial today!

    http://www.trusecure.com/offer/s0074/

    oooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

  • Next message: David Arnstein: "811493 again and again"

    Relevant Pages

    • [Full-disclosure] Re: What A Click! [Internet Explorer]
      ... > tell your windows to open .HTA files in notepad. ... > (since there are more ways to cover windows with malicious lookalikes). ... >> Using custom Microsoft Agent characters it is possible to cover any kind ... including security or download dialogs. ...
      (Full-Disclosure)
    • Re: How many bytes per Italian character?
      ... yes I know how to ask Windows CE how big a buffer I'm going to need. ... and characters in Italian are the same size as characters in English, ... So have you detected that WinCE will cause a buffer overrun? ... It is not an error to tell you a string might be longer than it actually ...
      (microsoft.public.vc.mfc)
    • Re: get wide character and multibyte character value
      ... How do you think the characters which requires more than 16-bit in UTF-16, ... it is why I think Windows has limitations to ... later added support for surrogate pairs, so what you see could depend ... Most of my code is handling text as UTF-8. ...
      (microsoft.public.vc.language)
    • Re: unicode in ruby
      ... wchar_t on MacOS X and Windows is UTF-16. ... composed characters (e.g., LOWERCASE E + COMBINING ACUTE ACCENT ... I do not care what Windows, OS X, or ICU uses. ... you can have arrays of strings. ...
      (comp.lang.ruby)
    • [Full-disclosure] What A Click! [Internet Explorer]
      ... Using custom Microsoft Agent characters it is possible to cover any kind of windows, including security or download dialogs. ... Because custom characters are fully scriptable, can have any kind of shape and are downloaded automaticly, this can be used as a flexible tool to cover and/or spoof any kind of window and lure the user to execute arbitrary code by performing one or two clicks (depening on security zone configuration and Windows version). ...
      (Full-Disclosure)