When printd is done, the file your pointing to will have mode 640, and the contents will contain printd's pid. NT allows any logged on user to bind to any port. By specifying a source IP to bind to, the user program takes precedence over the NT services listening on the port. This also allows a user program to disrupt services that are running on the machine such as file sharing that otherwise would require administrator privileges to terminate. Weld's Netcat page .
Web users can write to remote server drives and change server configuration files.
Three specific design flaws lead to sites being a victim. Default database ACLs are set to allow unrestricted access to all web users. Databases do not correctly inherit their ACLs from their parent template. No tool is provided to check that proper security measures have been taken on server configuration databases. These three problems lead to databases being left unsecured to any web user.