[41132] in bugtraq
Folder Guard exe files protection bypass
daemon@ATHENA.MIT.EDU (ShadowBeast@underdevelop.com)
Thu Nov 10 14:34:09 2005
Date: 10 Nov 2005 08:34:16 -0000
Message-ID: <20051110083416.12098.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: ShadowBeast@underdevelop.com
To: bugtraq@securityfocus.com
There is a protection of the software "Folder Guard" that protects against localy running exe files, which can by bypassed by:
running the exe files from the "Temperory internet files/xxxxx" directory, xxxxx stands for the randomal name granted by IE to the directory.
u can also install programs to this directory, and have no restricions.
this vuln was submitted by ShadowBeast
send any comments to: ShadowBeast@underdevelop.com
