Bugtraq mailing list archives

Re: Personal web server


From: aleph1 () UNDERGROUND ORG (Aleph One)
Date: Thu, 21 Jan 1999 12:03:57 -0800


Thanks to Xiaoyong Wu <xiaoyong_wu () yahoo com> for pointing out more
Windows weirdness.

Under Windows NT 4.0 SP3:

C:\> cd TEMP
C:\TEMP> cd ...
C:\TEMP> cd ....
C:\TEMP> cd .....
C:\TEMP>

[ It seems NT interprets N+3 dots as '.' ]

C:\TEMP> cd ..\
C:\>

[ It seems NT interprets '..\' as '..'. Makes sense as '\' is directory
  delimiter character for paths.  ]

C:\TEMP> cd ...\
C:\>
C:\> cd TEMP
C:\TEMP> cd ...\WINNT
C:\WINNT>

[ Whoa. Now NT interprets '...\' as '..'. Bad. Real bad. ]

C:\TEMP> mkdir TEST
C:\TEMP> cd TEST
C:\TEMP\TEST> cd ...\
The system cannot find the path specified.

[ Hmm. But it doesn't work in directories more that one deep. ]

C:\TEMP> cd ..\...\
C:\>

[ That figures. ]

C:\TEMP\TEST> cd ..\...
C:\TEMP> cd ....\
C:\TEMP>

[ Hmm. Now NT interprets '....\' as '..'. Weird. But wait it gets stranger. ]

C:\> cd TEMP
C:\TEMP> cd ....\
C:\TEMP> cd ....\
C:\>

[ Huh? The first '....\'  as interpreted as '.' and the second as '..'.
  But... ]

C:\> cd TEMP
C:\TEMP> cd TEST
C:\TEMP\TEST> cd ....\
C:\TEMP\TEST> cd ....\
The system cannot find the path specified.
C:\TEMP\TEST> cd ..
C:\TEMP\TEST> cd ..
C:\TEMP>

[ Now in a directory two levels deep the first '....\' is interpreted as '..'
  while the second one gives an error. The first '..' is interpreted as '.'
  while the second one works as normal. ]

C:\TEMP> cd ....\
C:\TEMP> cd TEST
The system cannot find the path specified.
C:\TEMP> cd .
C:\TEMP> cd TEST
C:\TEMP\TEST>

[ It seems that '....\' also breaks trying to cd to subdirectories. ]

The '....\' problems seems to appear for any such string with N+4 dots
followed by a slash. I can only guess on the many other ways they
may try to interpret pathnames.

--
Aleph One / aleph1 () underground org
http://underground.org/
KeyID 1024/948FD6B5
Fingerprint EE C9 E8 AA CB AF 09 61  8C 39 EA 47 A8 6A B8 01



Current thread: