September 10th, 2003, 10:59 AM
pls explain /PIPE/winreg
i am using WinXP....
today when i opened my looked for open files on PC remotely (ie for copying, which i have shared) i saw a connection which has opened a file named /PIPE/winreg with read+write permission ... i havent ever allowed write permissions on my shared folders...the snapshot is attached...
pls explain this.
guru@linux:~> who I grep -i blonde I talk; cd ~; wine; talk; touch; unzip; touch; strip; gasp; finger; mount; fsck; more; yes; gasp; umount; make clean; sleep;
September 10th, 2003, 11:30 AM
AFAIK "pipes" are normal in Windows NT family systems, which would include XP. They are to do with the Inter Process Communications System (IPC), and could be a source of a security exploit, at least in NT.
Please have a look at: http://www.giac.org/practical/Pankaj_Jawale.doc
This relates to securing NT systems, but may have some relevance, and certainly be of interest to others here who are using NT?
September 10th, 2003, 02:35 PM
/PIPE/Winreg is a named pipe and, as nihil said, are used for IPC.
More info about named pipes can be found here on the MSDN site.
Experience is something you don't get until just after you need it.