Home page logo

bugtraq logo Bugtraq mailing list archives

Re: con\con is a old thing (anyway is cool)
From: bernd.luevelsmeyer () HEITEC NET (Bernd Luevelsmeyer)
Date: Fri, 17 Mar 2000 13:45:31 +0100

Oliver Friedrichs wrote:
For example, you can create known devices with random extensions over
a file share, com1.1 com1.2 com1.3 com1.4, and you cannot remove them
locally.  It's probably a good thing that the CIFS layer doesn't
provide direct access to these devices, otherwise an anonymous share
could open up a number of other security issues.

The file can be removed if you write the filename in a way that parsing
doesn't recognize it as "special". Use a prefix of "\\.\" for example.

E:\temp>dir *nul*
File Not Found

E:\temp>echo test > nul:#

E:\temp>dir *nul*
00-03-17  13:29                      0 nul

E:\temp>del nul
The system cannot find the path specified.

E:\temp> del nul:
The system cannot find the path specified.

E:\temp>del \\.\e:\temp\nul

E:\temp>dir *nul*
File Not Found

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]