Penetration Testing
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Reconfiguring cmdshell Jul 02 2012 01:20PM
Yiannis Koukouras (ikoukouras gmail com)
Hi,

As I see it, in the first (valid) command you terminate with a double quote
';EXEC master..sp_configure 'xp_cmdshell', '1''

while during the second execution you terminate with a single quote.
';EXEC master..sp_configure 'xp_cmdshell', '1';RECONFIGURE'

Cheers,
Ioannis (Yiannis) Koukouras
CIS...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus