Penetration Testing mailing list archives

Re: getting a double quote by the xp_cmdshell


From: Ryan Russell <ryan () securityfocus com>
Date: Thu, 18 Jul 2002 12:05:05 -0600 (MDT)

On Thu, 18 Jul 2002, nobody wrote:

xp_cmdshell "type c:\program files\esm\agent.iss"

The NT TYPE command works if I enclose the whole
drive:\path with double quotes - the space in between
the program files is the problem

"type c:\progra~1\esm\agent.iss"

                                        Ryan


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/


Current thread: