lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun Oct 16 19:37:03 2005
From: Thierry at sniff-em.com (Thierry Zoller)
Subject: annoying bug in Windows XP

Dear Jerome,

AFAIK
A DOS 8.3 extension has 3 characters, del and various
other dos tools ignore everything that has more then
3 chars, so for del .jav is the same as .java

Thierry
http://thierry.sniff-em.com



JA> Hi,

JA> maybe something similar to this:

JA> http://seclists.org/lists/vuln-dev/2005/Feb/0007.html

JA> Frank Dietrich wrote:

>>Hi to all readers,
>>
>>this day I found a annoying misbehavior in Windows XP professional
>>with SP2. 
>>
>>I had a directory with some Java sources (*.java) and some backup
>>files (*.jav). Because I din't longer need the backup files I would
>>delete them with 'del *.jav'. But this command also delete all the
>>source files. #?%*. The last backup was 4 hours ago. :-/
>>
>>So I tried what happen and the result is the command above checks
>>only the first three chars from the extension (DOS is alive).
>>
>>Here is how you can reproduce it:
>>
>>mkdir testbug
>>cd testbug
>>rem.>file1.jav
>>rem.>file2.java
>>rem.>file3.javas
>>del *.jav
>>
>>All three files are deleted. Is this a known bug or a unknown feature?
>>
>>Frank
>>  
>>



-- 
Mit freundlichen Gr??en
Thierry Zoller
mailto:Thierry@...ff-em.com


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ