Vulnerability Development mailing list archives

Re: Windows file problem


From: Blake Frantz <blake () MAIL MC NET>
Date: Sat, 7 Oct 2000 19:23:28 -0500

What you are seeing is a splice, I believe it was RFP that wrote a tool
that searches for them on your computer, but I'm not positive.  I believe
tripwire for windows will also locate these such files.

Blake


On Fri, 6 Oct 2000 poepping () LOGICAL CM NU wrote:

      I don't know if this is a hole, or the file is going somewhere
else, but here is what I found.

create a directory i.e c:\tempfolder

go into the folder and type dir (its empty)

now type  echo junk >> :myfile

type dir again (its still empty)

now find a copy of vi.exe for windows (its all I can find that can read
and write these files)  once you get vi.exe  type vi :myfile  and presto
it loads the file, with the conent of "junk" you wrote to it.

next type start .  and you can see that windows explorer can't see it.

and if you try to delete the file it doesn't work.

So if someone wanted to, they could log onto a server/workstation and
create a file that fills up the harddrive (assuming that it takes up
space, haven't tried), And no one would see it, or be able to delete it.


Am I mising something? or is this just a flaw in windows (tested on
windows nt 4.0 doesn't seem to work on windows 98, but need to try
creating the file with vi.exe)



thanks,
matt
poepping () ksni net



Current thread: