full-disclosure - Re: HelpCtr - allow open any page or run

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: r_i_c_h_lists at btopenworld.com (Richard Maudsley)
Subject: Re: HelpCtr - allow open any page or run

Nope, me neither.

-Rich

>List,
>
>I couldn't reproduce this on patched XP. Anyone?
>If so, we'll need YA workaround :(
>
>Erik
>
>On 7 Feb 2004 21:49:26 -0000 "Bartosz Kwitkowski" wrote:
>> To: BugTraq
>> Subject: HelpCtr - allow open any page or run
>> Date: Feb 7 2004 9:49PM
>> Author: Bartosz Kwitkowski <bartosz wb pl>
>> Message-ID: <20040207214926.28580.qmail@....securityfocus.com>
>>
>> We can use Help Center to open any page or run any file.
>>
>>  hcp://services/layout/contentonly?topic=...
>>
>> where ... is a correct URL
>>
>> http:// for page
>> file:/// for run (remember use / (slash) in path e.g. c:/windows/system32/...
>
>Archives of original message:
>http://www.securityfocus.com/archive/1/353248
>http://seclists.org/lists/bugtraq/2004/Feb/0248.html
>
>PS I don't subscribe Bugtraq, just read the web archives
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html