Reply to post: Re: Print Spooler

PrintNightmare: Kicking users from Pre-Windows 2000 legacy group may thwart domain controller exploitation

Mowserx

Re: Print Spooler

In high school, our library had some menu interface that was used to launch Windows 3.x applications. This way they were able to limit what you could launch. Or so they thought.

There wasn’t any file system security (this is before NTFS) so if you knew what you were doing it was trivial to work around. I would use the menu to launch WordPerfect, and within WordPerfect I would open up one of the other .exe files accessible from the menu (e.g. notepad), do a Save As to something like notepad.ex_ to back it up, then from within WordPerfect open command.com, and save it over the original notepad.exe . Then I would go to the menu and launch “notepad”, which instead gave me a DOS prompt. At the end of the period I would revert the files back.

Our library also had a really cool laser printer that I wanted to use to print stuff I made at home. So at home I’d print to a file, copy the file to floppy, then at school copy the file straight to lpt1.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2021