LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News
User Name
Password
Syndicated Linux News This forum is for the discussion of Syndicated Linux News stories.

Notices


Reply
  Search this Thread
Old 10-11-2014, 09:30 AM   #1
LXer
LXer NewsBot
 
Registered: Dec 2005
Posts: 99,750

Rep: Reputation: 102Reputation: 102
LXer: Poor punctuation leads to Windows shell vulnerability


Published at LXer:

A class of coding vulnerabilities could allow attackers to fool Windows system administrators into running malicious code because of a simple omission: quotation marks.The attack relies on scripts or batch files that use the command-line interface, or "shell," on a Windows system but contain a simple coding error—allowing untrusted input to be run as a command. In the current incarnation of the exploit, an attacker appends a valid command onto the end of the name of a directory using the ampersand character. A script with the coding error then reads the input and executes the command with administrator rights.

Read More...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Microsoft blames poor Windows sales on PC slump LXer Syndicated Linux News 0 01-20-2012 06:30 AM
LXer: Poor Microsoft Gives Poor Software to Youngsters, Hopeless LXer Syndicated Linux News 0 02-20-2008 07:20 AM
LXer: Windows Media Player Regression Leads to SeaMonkey 1.0.4 Release LXer Syndicated Linux News 0 08-04-2006 08:21 PM
LXer: Poor, poor Apple! LXer Syndicated Linux News 0 05-18-2006 11:21 AM
SuidPerl Mail Shell Escape Vulnerability jeremy Linux - Security 1 04-27-2005 03:01 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - News > Syndicated Linux News

All times are GMT -5. The time now is 04:50 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration