[Xitami] DoS Bug still in v2.4d9 (W2K service)

[Jason Ozin at Technica Solutions]

 Further to my previous post:
 
  > 3. The bug that is supposed to be fixed (using dos device names) 
  > is not fixed. It is much harder to break but eventually I can 
  > break it. COM2  did it for me last night.
 
 Actually It is not hard to break at all. I can now crash the 
 service at will by typing http://<mydomin>/lpt1 and pressing 
 refresh in my browser 6 times in a row quickly. The service 
 completely hangs and cannot be stopped or terminated. I had to 
 reboot until I discovered pskill.exe from system internals' web 
 site www.sysinternals.com
 
 Who do I report this DoS bug to? 
 
 
 
 Jason Ozin
 Technica Solutions