Hello Frank & Bill,
Thank you for your post.  My Tango server is attacked at least 100 every
day with someone trying to break in to execute my cmd.exe.
As soon as I read Frank's post, I ran a search and sure enough I found
command.com in my WINNT/System32 directory.  (This probably qualifies
for a slap on the forehead.....  Sami I owe the kiddy) I am glad that
all the attacks have targeted the use of my cmd.exe and not the
command.com or they would have succeeded again in screwing up my Tango
Server.
Anyone that has an Internet server make sure to change the execute
permission of cmd.exe and command.com.
Manuel

Bill Downall wrote:

> Frank,
>
> Microsoft operating systems get confused by R:Base for DOS.
> R:Base starts out looking like a 16-bit DOS program, which would
> typically use COMMAND.COM, but then switches to 32bit protected
> mode by running DOS4GW.EXE.  So you can zip to either CMD.EXE
> (note the spelling), the 32-bit native NT/W2K command processor, or
> its 16-bit baby brother COMMAND.COM.
>
> Open a "command prompt" and type
>
> SET | MORE
>
> You will see that COMSPEC is set to CMD.EXE
>
> Then, at the command prompt, type
>
> COMMAND.COM
>
> When you get back to a prompt, type again:
>
> SET | MORE
>
> and you'll see that the comspec is different, and there may be some
> other differences in environment variables that are not used in
> COMMAND.COM but that are used in CMD.EXE.
>
> syntax and options are slightly different between the two, so,
> depending on what the "whatever" is on your command line, you may
> actually prefer to launch CMD.EXE rather than COMMAND.COM.  Both
> command processors should start from R:Base for DOS.
>
> Bill
>
> On Tue, 25 Sep 2001 18:29:17 -0700, Frank Radice wrote:
>
> >Is the ComSpec correct?  Why does it have COMMAND.COM?
> Should it be
> >CMD.COM?   Is this or can this cause a problem?
begin:vcard 
n:de Aguiar;Manuel
tel;fax:(323)661-7698
tel;work:(323)660-3511
x-mozilla-html:FALSE
url:http://www.mdenterprises.net
org:M|D Enterprises
adr:;;2412 No. Commonwealth Avenue;Los Angeles;California;90027-1206;USA
version:2.1
email;internet:[EMAIL PROTECTED]
title:Developer
note;quoted-printable:The information contained in this e-mail may be privileged, confidential,=0D=0Aand protected from disclosure.  If you are not the intended recipient, you=0D=0Aare hereby notified that any dissemination, distribution or duplication of=0D=0Athis communication is strictly prohibited.  If you have received this=0D=0Acommunication in error, please notify the sender immediately and delete all=0D=0Acopies.=0D=0A=0D=0Ahttp://www.mdenterprises.net=0D=0Ahttp:/www.databasedeveloper.com=0D=0Ahttp://www.MdrBASE.com=0D=0A
x-mozilla-cpt:;-1
end:vcard

Reply via email to