RE: directory traversal

From: Kevin Tierney (kevin46906@yahoo.com)
Date: 02/08/02


Date: Fri, 8 Feb 2002 05:16:47 -0800 (PST)
From: Kevin Tierney <kevin46906@yahoo.com>
To: Colby@BurlingtonVT.Com, 'Robert Collins' <robert.collins@itdomain.com.au>, 'E M' <rdnktrk@hotmail.com>, pvagarwal@yahoo.com, jlevenglick@fhlbatl.com, jnanney@datasync.com, vuln-dev@labs.secureance.com

This seems to work

C:\WINNT\system32>cd \.........\
 
C:\>cd WINNT\system32
The system cannot find the path specified.

c:\>cd \

c:\>cd \WINNT\system32
c:\WINNT\system32>

--- Colby Marks <Colby@DigitalJunction.com> wrote:
> One other interesting operation, changing
> successfully to a path on
> another drive does not bring back the functionality
> i.e.:
>
> C:\WINNT\system32>cd \.........\
>
> C:\>cd winnt\system32
> The system cannot find the path specified.
>
> C:\>cd /d d:\temp
>
> D:\TEMP>C:
>
> C:\>cd winnt\system32
> The system cannot find the path specified.
>
> And it seems to work fine in my WinXP Pro (fresh
> install).
>
> -Colby
>
> -----Original Message-----
> From: Robert Collins
> [mailto:robert.collins@itdomain.com.au]
> Sent: Thursday, February 07, 2002 7:59 PM
> To: E M; pvagarwal@yahoo.com;
> jlevenglick@fhlbatl.com;
> jnanney@datasync.com; vuln-dev@labs.secureance.com
> Cc: vuln-dev@securityfocus.com
> Subject: Re: directory traversal
>
> ----- Original Message -----
> From: "E M" <rdnktrk@hotmail.com>
> To: <robert.collins@itdomain.com.au>;
> <pvagarwal@yahoo.com>;
> <jlevenglick@fhlbatl.com>; <jnanney@datasync.com>;
> <vuln-dev@labs.secureance.com>
> Cc: <vuln-dev@securityfocus.com>
> Sent: Friday, February 08, 2002 10:48 AM
> Subject: Re: directory traversal
>
>
> > This does not appear to work in XP.
> >
> > Eric M.
>
> Strange...I'm running XP Pro.
>
> Rob
>

__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com