shunty

Microsofts new ultra secure O/S,

vulnerablitiy in XP, if you send someone this link in an e-mail or server it from a web page etc:

hcp://system/DFS/uplddrvinfo.htm?file://c:\test\*

it deletes everything in folder test on their machine.....replace test with winnt...you get the picture, not very good is it.

Service Pack 1 for windows xp fixes this....but how many machines are not running sp1....
just tried it on a pc @ work..it deleted all the files in the dir I created...using the current owners credentials.

shunty

shunty

ps - there is a reg fix for this if you don't want sp1 on

shunty

ChristianR

iTrader: (1)

doesn;t work for me?

[Edited by ChristianR - 9/13/2002 11:39:10 AM]

shunty

this was for the teccies, ask someone technical to do it for you
shunty

shunty

it's prob for a standard build of XP, if you have disabled half the services etc & custom build it might not work...I havn't researched which service account is used etc etc...it was just a general post.....
I'll spend a bit more time this afternoon looking at it, here is the link I got it from:

http://www.theregister.co.uk/content/4/27074.html

shunty

ozzy

Shunty,

You're so technical you can even make the link clickable

XP Vulnerability


Stefan

chockymonster

It works much better if you remove the test\ bit

[Edited by chockymonster - 9/13/2002 12:11:08 PM]

shunty

ozzy -

chockmonster - can you imagine the fun

shunty

darlodge

Scary stuff

Darren