|
|
Thanks, Michael!
"Your village called -
They're missing their idiot."
|
|
|
|
|
The "File Permission Canonicalization" is one of the most simple and basic forms of attack to a web server. Basically, you add ".." to the URLs and try to get to the root of the drive of the web server.
Most crappy web servers have this problem, and IIS had it too on the past.
If you see these requests on your web server log:
/scripts/..%5c../winnt/system32/cmd.exe
/msadc/..%5c../..%5c../..%5c/..
/scripts/..%5c../winnt/system32/cmd.exe
GET /MSADC/root.exe HTTP/1.0
Probably it's just the Nimda worm.
Trying to make bits uncopyable is like trying to make water not wet.
-- Bruce Schneier
By the way, dog_spawn isn't a nickname - it is my name with an underscore instead of a space. -- dog_spawn
|
|
|
|
|
I've seen a couple of those - thanks for the clarification!
"Your village called -
They're missing their idiot."
|
|
|
|
|
I'm going nuts - no email for two days! My ISP is clueless, so I've been doing some spelunking on his network myself trying to find a possible cause. Ping reports that it can't resolve the name of the mail server, leading me at first to believe that his DNS is down. Nslookup also fails to locate the ISP's DNS server, though it does locate the server upstream from the ISP on the espire.net system. But even this one reports that it can't find the local mail server. On the other hand, I have no trouble surfing the 'net, so DNS must be responding. This leads me to conclude that the local DNS is dead, the mail server is down or not responding, and that it has been dead long enough that the upstream DNS MX record has expired. I'm going across the river to drop off a payment at their office in a couple hours, so I'll pass on what I've found if they're in the office, but if there are any other tests I can run to further isolate the problem I'd like to know about them. Any suggestions?
"Your village called -
They're missing their idiot."
|
|
|
|
|
Oh well, the bonehead finally got it to work, after a long, 18-hour shift. If he'd bothered to call I'm sure that this community could have solved the problem in about 40 seconds... Thanks anyway, guys and gals...
"Your village called -
They're missing their idiot."
|
|
|
|
|
I was born intelligent
Education ruined me!.
|
|
|
|
|
Confused about what? When the ISP I use breaks, the admins (if they're having a smart day) call me and I usually find something that they've missed or done wrong - it's almost always helpful to get an outside opinion before you drive yourself batty trying to unscrew the inscrutable on your own. If I can't figure it out, sometimes I submit the problem to the fine geniuses here at CP for help, and they generally come up with a solution. Other times, when I really don't care whether my connection is working that day, I just tell them I have no idea and let them squirm for a few hours or days.
My guess is that one day, whoever owns the place will figure out that he should have hired me to run it instead of the cable monkey he's currently using.
"Your village called -
They're missing their idiot."
|
|
|
|
|
How can i use this exe for remote computer? I always have error:access denied if i used parameter "/s remotecomputername". Should the remote computer sharing WINDOWS folder? Please help me.. Thanks
|
|
|
|
|
1) You must be able to ping the other computer.
2) It would require a username and a password.
For more information follow this link: http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/proddocs/tasklist.asp
|
|
|
|
|
Ok, i'm on xp. I have the admin account on a computer. and students use the "Students" account, with "limited privilidges".
my question is... how can I make a folder, and give the "Students" privilidges to write to that folder, but.... not delete anything from it, or delet the folder it self. BUt, still allow the admin to delete stuff.
any tips?
bye the way... this is all on a local hard drive. not over the network or anything... on a singel computer..
thanks.
/\ |_ E X E GG
|
|
|
|
|
I don't think you can, but I am probably wrong!!
BTW if you have write access, to "delete" a file all you need to do is just overwrite it with garbage.
"The greatest mistake you can make in life is to be continually fearing you will make one." - Elbert Hubbard
|
|
|
|
|
Have you tried the following:
1) Right click on the directory itself and go to "Sharing and security"
2) Select "Share this folder"
3) Press the "Permissions" button.
4) Give everyone, Read permissions and yourself, Full Control.
I am thinking that this would prevent anyone else from deleting any content of tha directory or that directory itself, but will let you do whatever you want with it.
|
|
|
|
|
oh, yeah... i figured this out a long time ago.
i'm just an a**hole and didn't post it.
thanks.
/\ |_ E X E GG
|
|
|
|
|
 I've seen problems like that all too often
Matt Newman
If you chose to continue this discussion, I am fully prepared to make you my bitch. I invite you to ask around, and you'll find out that I'm quite capable of doing so - John Simmons on Trolls
|
|
|
|
|
Hi Friends,
when i call a MSMAPI object from a standalone exe in VB .NET, i am able to send a mail. But when i spawn this exe as a process from a windows service, i get an error message while signing on using the MAPI session SignOn() method. I tried using windows service logon as both local system and using my NT logon too. The error message thrown is
System.Runtime.InteropServices.COMException (0x800A7D1A): Not supported
at MSMAPI.MAPISessionClass.SignOn()
at ProcTryMail.tryMail.Pr_SendMail() in D:\Projects\Ems\Backup_Nov17OutSeq\ProcTryMail\tryMail.vb:line 20
My feeling was that some security access is required.
The code i have used is:
Public Class tryMail
Private objMapiSession As MSMAPI.MAPISession
Private objMapiMsgs As MSMAPI.MAPIMessages
Private i As Boolean
Public Sub Pr_SendMail()
Try
objMapiSession = New MSMAPI.MAPISession()
objMapiMsgs = New MSMAPI.MAPIMessages()
objMapiSession.SignOn()
objMapiMsgs.SessionID = objMapiSession.SessionID
objMapiMsgs.Compose()
objMapiMsgs.RecipDisplayName = "--give some mail id here--"
objMapiMsgs.MsgSubject = "From .NET MAPI"
objMapiMsgs.Send()
objMapiSession.SignOff()
Catch
End Try
End Sub
End class
Will be grateful if anyone of u is able to find out the problem.
Thanks
Alex
|
|
|
|
|
I'm having problems with Virtual PC 2004 - the "Virtual Machine Network Services" it attaches to my network card hoses the connection, but if I uncheck it in the properties, everything else works fine. Anyone got an idea how to resolve this problem (I'm thinking about going back to Virtual PC 5.2 
--
Ian Darling
"The moral of the story is that with a contrived example, you can prove anything." - Joel Spolsky
|
|
|
|
|
|
Hello,
For the moment, I am using RealVNC to take the control of a workstation for maintenance. The problem is that users which are in front of this workstation (this is a kiosk) can see what I am doing on it.
Then, I am searching for a software which could enable me to hide (or show a black screen, or a customized screen) the desktop of the glance of the users while I make my maintenance. Is this software exist ?
Thanks.
|
|
|
|
|
Depending on your OS, you might be able to use Terminal Services (sometimes called Remote Desktop) to do this.
On some OS's (XP Pro for instance), this will "lock" the machine. It blacks out the screen until you're done with it, then it comes back with the screen locked (like when you do Ctrl-Alt-Delete "Lock Computer"). The machine would then have to be unlocked with a name and password. I'm not sure if there's a way around that.
On other OS's (Win2K Server for instance), it allows multiple people to terminal service in at once (2 by default I believe) while the local access is not affected. In this scenario, you'd be working behind the scenes without the customer knowing you're there.
If those two don't work for you based upon the OS you're using, you could look into a non-free service. My friend uses one called GotoMyPC link. I know for a fact that GotoMyPC has an option for blacking out the screen. I'm not sure how good it is in general, but the nice thing about these services is you don't have to open up a firewall or port forward a NAT.
Hope that helps...
I, for one, do not think the problem was that the band was down. I think that the problem may have been that there was a Stonehenge monument on the stage that was in danger of being crushed by a dwarf.
-David St. Hubbins
|
|
|
|
|
Is there a way to check out my motherboard's FSB (like if that is 66/100/133/200 mhz) from the OS (I use Windows XP) without opening the PC??
Can I also know about the kind of ram from it?
I was born intelligent
Education ruined me!.
|
|
|
|
|
HWiNFO32[^] is what you need. I use HWiNFO from a boot floppy myself and have done for close to a year now. It's very good though haven't used HWiNFO32 so don't know if it gives the same information or more.
Michael Martin
Australia
"I suspect I will be impressed though, I am easy."
- Paul Watson 21/09/2003
|
|
|
|
|
Michael Martin wrote:
HWiNFO32[^] is what you need.
Thanks...
Michael Martin wrote:
Australia
Ur cricket team got the TVS cup in India... 
I was born intelligent
Education ruined me!.
|
|
|
|
|
Use this software to find the speed.
http://www.aida32.hu/aida32.php
AIDA32
Chao,
Ram
|
|
|
|
|
Oh... thanks would give that a try to... Thanks
I was born intelligent
Education ruined me!.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
