[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-Disclosure] Re: HelpCtr - allow open any page or run



List,

I couldn't reproduce this on patched XP. Anyone?
If so, we'll need YA workaround :(

Erik

On 7 Feb 2004 21:49:26 -0000 "Bartosz Kwitkowski" wrote:
> To: BugTraq
> Subject: HelpCtr - allow open any page or run
> Date: Feb 7 2004 9:49PM
> Author: Bartosz Kwitkowski <bartosz wb pl>
> Message-ID: <20040207214926.28580.qmail@www.securityfocus.com>
>
> We can use Help Center to open any page or run any file.
>
>  hcp://services/layout/contentonly?topic=...
>
> where ... is a correct URL
>
> http:// for page
> file:/// for run (remember use / (slash) in path e.g. c:/windows/system32/...

Archives of original message:
http://www.securityfocus.com/archive/1/353248
http://seclists.org/lists/bugtraq/2004/Feb/0248.html

PS I don't subscribe Bugtraq, just read the web archives

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html