Win2000 and exec()

[Ravenous]

I'm trying to write a simple web interface for the "net send" command. At present, I'm using the following:

exec("net.exe send the.user testing");

which should make the server send "testing" accross the network to the.user via the messaging service. However, all I get is a downlaod box. WTF?

Can anyone help me out here?

EDIT:
So I decided to download the file and read the contents. The first line says "Access denied." and is followed by the HTML document. So I adjusted the permissions on cmd.exe and I get the same results. 😕 I also changed the permissions on net.exe.

[weekender]

i know this much; on win2k, there is a user called IUSR_COMPUTERNAME (where computername is... obvious) and this users' permissions on the html_root are similar to using chmod on unix. So maybe you need to give this user permissions on net.exe, or cmd.exe or something

adam

[Ravenous]

Unfortunately, I've made those permission changes. :-\

[Truti]

don't change the cmd.exe to a more slacky premission!

search on the net for the unicode bug, or take a looke at my page:
http://www.truti.com/index.php?center=./security/hack_crack_iis_4_5.php

If you change the premissions so they are static and slacky, you just open for more security problems...!