New User, Welcome!     Login

drive letter

RE: Millions of PDF invisibly embedded with your internal disk paths

Search for this on your favorite search engine (Google/Bing)
------------------------------------------------------------
filetype:pdf file c (htm OR html OR mhtml)

Google Search 1 (for drive C)
[http://www.google.com/search?hl=en&q=filetype%3Apdf+file+c+%28htm+OR+html+O
R+mhtml%29&btnG=Search&aq=f&oq=&aqi=] - 4 million results
Google Search 2 (for drive D)
[http://www.google.com/search?hl=en&q=filetype%3Apdf+file+d+%28htm+OR+html+O
R+mhtml%29&btnG=Search&aq=f&oq=&aqi=] - 13 million results

Millions of PDF invisibly embedded with your internal disk paths

Search for this on your favorite search engine (Google/Bing)
------------------------------------------------------------
filetype:pdf file c (htm OR html OR mhtml)

Google Search 1 (for drive C)
[http://www.google.com/search?hl=en&q=filetype%3Apdf+file+c+%28htm+OR+html+O
R+mhtml%29&btnG=Search&aq=f&oq=&aqi=] – 4 million results
Google Search 2 (for drive D)
[http://www.google.com/search?hl=en&q=filetype%3Apdf+file+d+%28htm+OR+html+O
R+mhtml%29&btnG=Search&aq=f&oq=&aqi=] – 13 million results

Remote Memory Read in Diskeeper 9 - 2007

                printf("Could not determine drive letter.\n");
        }
        else
        {
                c--;
                printf("Windows running on drive %c\n",c);
        }

        //get the Windows dir
        z=0x7FFE0036;
        wcscpy(wstr, L"WINDOWS");

PHP filesystem attack vectors

This is because of the many (evil) normalization instructions and
routines implemented in PHP in conjunction with a feature: include_path.

include_path is a feature of PHP similar to the PATH on unix systems,
when an include, include_once, require or require_once call is made if
the file is relative (eg: doesn't begin with a slash or a drive letter
on Windows) a lookup will happen in every path defined in include_path.

include_path is defined both at ./configure time and in the php.ini or
at runtime with ini_set("include_path" ..) and defaults to ".:".




Copyright © 1995-2012 LinuxRocket.net. All rights reserved.

Nearly all of LinuxRocket's features are free. Be kind and donate to the cause!