[Xitami] DoS Bug still in v2.4d9 (W2K service)

Tony Wenzelhuemer xitami@lists.xitami.org
Mon, 17 Dec 2001 22:33:43 +0100


When I try this I just get a 403. Nothing else. Huh?
tony

At 21:19 17.12.2001 +0000, you wrote:
>  Further to my previous post:
>
>   > 3. The bug that is supposed to be fixed (using dos device names)
>   > is not fixed. It is much harder to break but eventually I can
>   > break it. COM2  did it for me last night.
>
>  Actually It is not hard to break at all. I can now crash the
>  service at will by typing http://<mydomin>/lpt1 and pressing
>  refresh in my browser 6 times in a row quickly. The service
>  completely hangs and cannot be stopped or terminated. I had to
>  reboot until I discovered pskill.exe from system internals' web
>  site www.sysinternals.com
>
>  Who do I report this DoS bug to?
>
>
>
>  Jason Ozin
>  Technica Solutions
>
>
>
>--
>Xitami Users Mailing List -- For Xitami support
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami