Home page logo

bugtraq logo Bugtraq mailing list archives

Re: IE4 Custom Folder
From: ckd () CKDHR COM (Christopher K Davis)
Date: Fri, 2 Oct 1998 16:52:07 -0400

David LeBlanc <dleblanc () MINDSPRING COM> writes:

With respect to disabling this attack on Win95, your only options are (in
personal order of preference):

1) Install NT, precreate desktop.ini files and lock them down
2) Don't share anything
3) Disable active desktop

I'm not sure #2 stops all variants of this attack; what happens if
someone mails you a desktop.ini file, and then you go to look in your
mailer's attachments directory?  My (untested) guess is that you lose.

Christopher Davis * <ckd-sig () ckdhr com> * <URL:http://www.ckdhr.com/ckd/>
Put location information in your DNS! <URL:http://www.ckdhr.com/dns-loc/>

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]