Security issue with special files

[Rocket]

HI All,
Was wondering if I am the first to come accross this.
We were trying to ftp a file down to XP from a unix
server called con.gif and noticed the contents are copied
to the console special file. After seeing that there are
other special files comx lpt1 aux ..etc I decided to test
com3.txt as a file transfer.

Sure enough if I put a text file on unix called com3.txt
with some AT modem commands in it and then try to ftp it
down to a windows client - instead of gettin a file it
sends the file directly to my modem which executes the
commands.

Scary.

 

[Roger Abell]

Very scary. Explorer and the cmd shell treat these
special names as disallowed filenames. Evidently
FTP is more than just a little ignorant.
I am going to do a little testing, and once confirmed,
pass your info up the chain.

 

[Rocket]

Thanks Roger,
I'd be most interested in seeing what comes of it.

Cheers
Rocket