[13590] in bugtraq
Re: Windows 2000 Run As... Feature
daemon@ATHENA.MIT.EDU (Kenn Humborg)
Thu Jan 27 14:16:57 2000
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <NBBBIGEGHIGMPCNKHCECGEJKDJAA.kenn@bluetree.ie>
Date: Thu, 27 Jan 2000 11:55:59 -0000
Reply-To: Kenn Humborg <kenn@BLUETREE.IE>
From: Kenn Humborg <kenn@BLUETREE.IE>
X-To: Ben Russell <benr@FRESHFOOD.NET.AU>, BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <PEEHJPJMBDONFFENDHAEIEKCCBAA.benr@freshfood.net.au>
> > As has been discussed here before, there are a number of places that a
> > Windows system will look for a binary, so to be really sure that you're
> > getting the one in system32, use the Run button from the start menu - it
> > only looks in %systemroot% for things.
>
> NOT TRUE... In every version of windows ive used (upto win2k rc2)
> the start->run command will run any executable in your %path%.
And more... If you enter 'winword' and winword.exe is not on
your patch, Explorer will look for HKEY_LOCAL_MACHINE\SOFTWARE\
Microsoft\Windows\CurrentVersion\App Paths\winword.exe, pull out
the Default value (say C:\program files\MSOffice\Winword\winword.exe)
and run that.
Aarrgghh!
Later,
Kenn
