-
Poster
http://www.zeropaid.com/news/article.../10022003i.php
Is this site true?
Malicious code
There exists malicious code in ES5.exe's "Search Service" packet handler. By sending packet 0Ch, sub-function 07h to the "Search Service"'s IPort, a remote attacker could delete any file the user is sharing. If the remote attacker uses "filenames" with a relative path in them (eg. "......WINDOWSNOTEPAD.EXE"), the remote attacker could also delete files in eg. the windows and windowssystem32 folders, or any other folder on the same partition as any of the shared folders. Since most users using Windows are in the Administrators group, a remote attacker could also delete the C:BOOT.INI file which is a required boot file used by ntldr.
IMPORTANT: This is not a bug! They intentionally added this code to ES5
<span style='color:blue'>Ladies and Gentlemen, John Frusciante</span>
-
-
11-07-2003, 05:36 PM
File Sharing -
#2
I know stuff ...
If you attack the establishment long enough and hard enough, they will make you a member of it.
-- Art Buchwald --
-
-
11-08-2003, 06:39 PM
File Sharing -
#3
Computer Abuser
BT Rep: +3
-
-
11-08-2003, 07:11 PM
File Sharing -
#4
Wise Kvcd Maker/PIMP
I can't believe u didn't see that bright red topic and it says the exact same thing u just said.
-
-
11-08-2003, 07:14 PM
File Sharing -
#5
BANNED
yup
-
-
11-08-2003, 07:15 PM
File Sharing -
#6
BANNED
-
-
11-08-2003, 07:18 PM
File Sharing -
#7
Regular Member
BT Rep: +5
i had downloaded that es5 time ago but it was kinda shite it would download superfast about 15 meg then just idle...its shit wouldnt advise anyone to get it...so it had a malicious code then?...
-
-
11-08-2003, 07:48 PM
File Sharing -
#8
Poster
-
-
11-09-2003, 01:51 AM
File Sharing -
#9
SP MngR
Originally posted by random nut@8 November 2003 - 11:48
Who deleted my reply?
Me...
-
-
11-09-2003, 05:46 AM
File Sharing -
#10
Poster
Originally posted by REALITY+9 November 2003 - 03:51--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (REALITY @ 9 November 2003 - 03:51)</td></tr><tr><td id='QUOTE'><!--QuoteBegin-random nut@8 November 2003 - 11:48
Who deleted my reply?
Me...
[/b][/quote]
I knew you were SharePro, ShitHead.
-
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
Bookmarks