[Xitami] DoS Bug still in v2.4d9 (W2K service)

[Francis Turner]

Ewen McNeill wrote:

>In message <008401c18755$25e8aca0$1564a8c0@troy.ozin.foo>, "Jason Ozin at Technica Solutions" writes:
>
>>I've investigated further and it also happens with device PRN but not COM1
>>or COM2. So I suspect this may be connected to the server in question
>>actually having a device hanging off LPT1. SP2 by the way.
>>
I have a w2k pro machine with Sp1 can't get this to occur, but I don't 
have a printer attached to lpt1, so this could eb why. I did notice that 
doing a dir>prn in a CMD prompt caused the machine to spike to ~70% CPU 
(from essentially 0) with no output for a couple of minutes. The CMD 
never seems to return even though the CPU goes back down to 0

I also noticed that Xitami takes ~1 second to give a 403 to pages like 
/aux or /com1 whereas its in the milliseconds to give the 404 for 
/nothere.htm

Francis

-- 
...if the US Government were ever to get really serious about Internet 
security, the top players in Microsoft's management hierarchy would find 
themselves handcuffed, blindfolded, led onto a tarmac within some obscure 
Air Force base, and shot.
-- Thomas C Greene (http://www.theregister.co.uk/content/55/23223.html)