SHARE
Windows-based attack bypasses file restrictions, network detection
By Michael S. Mimoso
Excerpt:
Dan Crowley, a tech support engineer at Core Security Technologies Inc., presented several means of bypassing these protections in the Windows versions of four Web servers: Nginx, Cherokee, Mongoose and LightTPD. The most glaring is through the use of 8.3 aliases in Windows. These aliases are DOS-compatible aliases created every time a file is created in Windows. Both file names can be accessed, even though they aren't the same.
Source: SearchSecurity.com
