Vulnerability Development mailing list archives

Re: directory traversal


From: Philip Rowlands <phr () doc ic ac uk>
Date: Wed, 6 Feb 2002 15:54:49 +0000 (GMT)

On Tue, 5 Feb 2002, Jim Nanney wrote:

On my win2k machine using cmd.exe:

C:\WINNT\system32\drivers>cd \...\
C:\>

on my win98 machine using command.com

C:\WINDOWS\SYSTEM32\DRIVERS>cd \...\
Bad command or file name
C:\WINDOWS\SYSTEM32\DRIVERS>

I get this:

C:\WINDOWS>cd \...\
Invalid directory
C:\WINDOWS>ver
Windows 98 [Version 4.10.2222]

rather than "Bad command or file name". I'd attribute this to Win2K
having unix-like semantics for the root directory's parent, i.e. itself.
Win98 does not have this behaviour, and root's parent does not exist.


Cheers,

Phil


Current thread: