Vulnerability Development: Re: Shell:

[Seth Chromick <seth.chromick () earthlink net>]

steve johnson wrote:

> On a Windows 2000 box, IE version 6, the command does nothing ("page
> cannot be displayed"). In addition, shell:\\windows\system32\cmd.exe
> doesn't do anything either. Run C:\windows\system32\cmd.exe and a shell
> pops up right away.
>
>
> ...steve
>
> On Thu, 8 Jul 2004, Perrymon, Josh L. wrote:
>
>
> > What do you think about this in Mozilla OR IE?
> >
> > shell:windows\system32\cmd.exe
> >
> > I can't seem to pass any variables to it though because it bombs but my
> > syntax may be incorrect.
> >
> >
> >
> > Joshua Perrymon
> > Sr. Network Security Consultant
> > PGP Fingerprint
> > 51B8 01AC E58B 9BFE D57D  8EF6 C0B2 DECF EC20 6021
In Thunderbird, nothing happens at all. You click the link and you get 
an hourglass for a second, but nothing actually pops up.