full-disclosure - Mysql windows 4.1.8 build PATH mess-up

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200501041715.j04HFmvO028383@lists.netsys.com>
From: peteoswald at comcast.net (Peter Oswald Jr.)
Subject: Mysql windows 4.1.8 build PATH mess-up

Not sure if this has already been posted, but when Mysql 4.1.8 is installed,
it gives an option to add its bin directory to the PATH.  I am new to this
but I hope my explanation gets the point across. It modifies such an example
path:

PATH=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program
Files\Microsoft Visual Studio\Common\Tools\WinNT;C:\Program Files\Microsoft
Visual Studio\Common\MSDev98\Bin;C:\Program Files\Microsoft Visual
Studio\Common\Tools;C:\Program Files\Microsoft Visual
Studio\VC98\bin;C:\BC45\BIN

to-

PATH=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Progra
m Files\Microsoft Visual Studio\Common\Tools\WinNT;C:\Program
Files\Microsoft Visual Studio\Common\MSDev98\Bin;C:\Program Files\Microsoft
Visual Studio\Common\Tools;C:\Program Files\Microsoft Visual
Studio\VC98\bin;C:\BC45\BIN

It seems that %SystemRoot% does not get defined until a certain point (later
than needed) in the Windows boot process, and causes the problem of the
C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem directories not
getting set in the PATH.  For example, install Mysql 4.1.8 (windows build)
and select the option to add to PATH, then reboot.  Then try an "ipconfig"
and it will say unrecognized command, as well as any other executables that
are in the aforementioned directories.

-Peter Oswald

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050104/f692877f/attachment.html