lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
From: mbassett at omaha.com (Bassett, Mark)
Subject: Recycle Bin Unavailability of Service

 

Um... just try typing it in twice?  The first time after the first
character it goes back to recycle bin, but the second time it lets you
type in whatever you want.  I am using XP SP1.  Besides.. I don't really
see how this is a security issue, and in fact I think its rather silly
:-) 

 

 

-----Original Message-----
From: Kaveh Mofidi [mailto:admin@...uretarget.net] 
Sent: Monday, August 04, 2003 6:26 AM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] Recycle Bin Unavailability of Service

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 

Secure Target Network (Security Advisory August 04, 2003) 
Topic: Recycle Bin Unavailability of Service
Discovery date: July 24, 2003

 

Affected applications and platforms: 
Windows XP Service Pack 1

 

Not affected applications and platforms:
Windows 2000 Service Pack 3 (and may others)

 

Introduction: 
I'm sure this is related to security issues because it gets in touch
with availability. So, you may want to explore some places with your
"Windows Explorer" or "My Computer" from else where. That's make no
sense to you but ever doing exploring from "Recycle Bin" to anywhere
else?
You can't do this and this is a kind of Unavailability!
When you clicked on "Recycle Bin" on any address bar, the word become
highlighted and when you trying to type a path, the words and phrases
you typed, turn to "Recycle Bin". This way, you cannot change
MANUALLY to any desired location from "Recycle Bin".

 

Exploit: 
There's no exploit for this misbehavior but you would be aware of
unavailability this situation brings to your desktop because some day
may you have not any mouse.

 

Workaround: 
This involved with Windows XP GUI behavior and may fix in future but
if you want workaround that, just copy and paste you desire path and
press "ENTER" as fast as possible.
 
Tested on: 
Windows XP Service Pack 1
Windows 2000 Service Pack 3

 

Feedback: 
Kaveh Mofidi (Admin@...ureTarget.Net) 
Secure Target Network (Security Consulting Group) 
HTTP://SECURETARGET.NET

 

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2

 

iQA/AwUBPy5A2WO1siv41icpEQKRGgCfc40Jat/xExHqDtQCS+gF6blrVYUAnjZh
kt2GRpjpZN8rBy0BOU1BMGdg
=b9Al
-----END PGP SIGNATURE-----



************************************************************
Omaha World-Herald Company computer systems are for business use only.
This e-mail was scanned by MailSweeper
************************************************************

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030804/b68342f6/attachment.html

Powered by blists - more mailing lists