[Xitami] DoS Bug still in v2.4d9 (W2K service)
Tony Wenzelhuemer
xitami@lists.xitami.org
Mon, 17 Dec 2001 22:33:43 +0100
When I try this I just get a 403. Nothing else. Huh?
tony
At 21:19 17.12.2001 +0000, you wrote:
> Further to my previous post:
>
> > 3. The bug that is supposed to be fixed (using dos device names)
> > is not fixed. It is much harder to break but eventually I can
> > break it. COM2 did it for me last night.
>
> Actually It is not hard to break at all. I can now crash the
> service at will by typing http://<mydomin>/lpt1 and pressing
> refresh in my browser 6 times in a row quickly. The service
> completely hangs and cannot be stopped or terminated. I had to
> reboot until I discovered pskill.exe from system internals' web
> site www.sysinternals.com
>
> Who do I report this DoS bug to?
>
>
>
> Jason Ozin
> Technica Solutions
>
>
>
>--
>Xitami Users Mailing List -- For Xitami support
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami