httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Alexei Kosut <ako...@leland.Stanford.EDU>
Subject Re: Alert: ASP vulnerability with Alternate Data Streams (fwd)
Date Fri, 03 Jul 1998 01:46:11 GMT
On Thu, 2 Jul 1998, Marc Slemko wrote:

[...]

> *IF* you are talking about File Records in the Mft, then in my experience
> this is incorrect. It appears that all *non-extension* records will always
> have:
> 
> $STANDARD_INFORMATION
> $FILE_NAME

Is there any way to make use of this $FILE_NAME thing to somehow
canonicalize the filename, to make sure that you don't run into these
sorts of problems, I wonder.

I don't have access to an NT machine with (or without) an NTFS drive right
now, but it might be worth looking into.

-- Alexei Kosut <akosut@stanford.edu> <http://www.stanford.edu/~akosut/>
   Stanford University, Class of 2001 * Apache <http://www.apache.org> *



Mime
View raw message