[Xitami] Fwd: Denial of service vulnerability in Xitami Open Source WebServer

[Jacob Dahl Pind]

on 22-Sep-03 17:16:40, Josh A wrote:
>-----Original Message-----
>From: Oliver Karow <Oliver.karow@gmx.de>
>To: bugtraq@securityfocus.com
>Date: Mon, 22 Sep 2003 14:28:05 +0200
>Subject: Denial of service vulnerability in Xitami Open Source Web Server

>Denial of service vulnerability in Xitami Open Source Web Server
>================================================================

>Date: 22.09.2003
>=====


>Affected Systems
>================

>The vulnerability was discovered on several versions (production and 
>beta) of Xitami
>webserver for Windows NT:

>- Xitami 2.5B4 (bw3225b4.exe)
>- Xitami 2.5B4 (bs3225b4.exe)
>- Xitami 2.4D9 (bw3224d9.exe)

>I did no tests with the other versions and os/platforms (OS/2, Alpha, 
>OpenVMS, Unix).
>Therfore i can't confirm that the vulnerability exists there.

Atleast 2.4d9 running on linux aint vulnerable, did a quick test here, 
with some larger values too.

regards Jacob Dahl Pind


--
		CBM, Amiga,Vintage hardware collector
		  Email: rachael@rachael.dyndns.org
		   url: http://rachael.dyndns.org