Re: cmd.exe / root.exe question

From: Hanamichi Sakuragui (El Talentoso !!!) (raponchi@friends.cl)
Date: 08/27/01 

Message-ID: <00c401c12f19$ffdd8500$0201a8c0@desarrollo>
From: "Hanamichi Sakuragui (El Talentoso !!!)" <raponchi@friends.cl>
To: <focus-ms@securityfocus.com>
Subject: Re: cmd.exe / root.exe question
Date: Mon, 27 Aug 2001 13:01:47 -0400

----- Original Message -----
From: "Phaedrus" <phaedrus@lycanon.org>
To: <focus-ms@securityfocus.com>
Sent: Monday, August 27, 2001 11:18 AM
Subject: Re: cmd.exe / root.exe question

> It's true that you can't get a remote shell from a scriptable cmd.exe;
> you can't get a telnet-style window that allows you to type in
> commands and see the output. However, I call your careful attention
> to the "/c" parameter of CMD.EXE, which allows you to specify a
> command line to be immediately executed. Simply running CMD.EXE has
> no interesting results; but running, say, "CMD.EXE /C DEL /S /Q
> C:\*.*" will have a very negative impact on system reliability.
>
That's true, but in the case of root.exe (CR II) everytime i tried to run a
command the iis ask me for a login/passwd, why ?

Rodolfo

Relevant Pages