Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: Win 2000 & IE 'shell://' problem?

Re: Win 2000 & IE 'shell://' problem?

From: Alex Schuetz <antitrack_legend_at_TELEKABEL.AT>
Date: Fri, 2 Jun 2000 20:28:13 +0200

Hello!

I tried the patterns "shell:" , "shell://", and "shell:\\" on
my _Windows 98 2nd edition_ together with internet explorer
5.00.2614.3500 (to be precise with version numbers, that is) and got
some interesting result. First, nothing would happen, except a call to a
curious DLL...the error message was like this:

---------quote error start

Öffnen Sie die res://C:\WINDOWS\SYSTEM\SHDOCLC.DLL/syntax.htm#shell://
Homepage, und suchen Sie dann nach Links zu den gewünschten
Informationen.

Falls Sie die Adresse der Seite manuell in der Adressleiste eingegeben
haben, stellen Sie sicher, dass die Adresse keine Tippfehler enthält.

--------- quote error end

So we can see, a "curious" DLL is called, SHDOCLC.DLL .

A few moments later, I wasnt able to ping any computer at all, always
getting error code 10050. Duh. I rebooted, but can't always reproduce
this effect. I'll keep to you up to date trying to 100% reproduce these
results. See ya...

Alex
Received on Jun 02 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos