Security issue with special files

  • Thread starter Thread starter Rocket
  • Start date Start date
R

Rocket

HI All,
Was wondering if I am the first to come accross this.
We were trying to ftp a file down to XP from a unix
server called con.gif and noticed the contents are copied
to the console special file. After seeing that there are
other special files comx lpt1 aux ..etc I decided to test
com3.txt as a file transfer.

Sure enough if I put a text file on unix called com3.txt
with some AT modem commands in it and then try to ftp it
down to a windows client - instead of gettin a file it
sends the file directly to my modem which executes the
commands.

Scary.
 
Very scary. Explorer and the cmd shell treat these
special names as disallowed filenames. Evidently
FTP is more than just a little ignorant.
I am going to do a little testing, and once confirmed,
pass your info up the chain.
 
Back
Top