Bugtraq mailing list archives
Re: crash windows boxes on your local network (twinge.c)
From: aleph1 () SECURITYFOCUS COM (Elias Levy)
Date: Mon, 14 Feb 2000 14:02:27 -0800
This is a summary of the responses to this message. Please, check reporting whether an exploit works for you remember to include the OS and application version numbers, what patches you have applied, and under what conditions you tested. vectro () pipeline com: Windows 98 - BSOD, TCP stack not working merlin () scl cwru edu: Source: RedHat 6.1 Target: NT4 SP6a Packets went through a Cisco ethernet switch. Did not do anything. heri () inwestnet de: Did not work. "Torgeir Hansen" <torgeir () ohd no>: Locks up Win98se box (PII-350, 128Mb ram) on a lan. It does NOT affect NT4.0 Server with sp5 on lan. Windows 200 does not die (tested via modem and lan). Gene Black <gblack () 3wave com>: Hmmm. This didn't do a thing to my Windows 95 (B) box (local or remote testing), but it trashed my Cisco 760 series ISDN router. I was running the code below off of a remote box (so the trash was coming in the WAN side) and the router was hit so hard that the ethernet side wasn't even pingable. Everything trying to route through it started producing various strange routing errors (like host unreachable when trying to traceroute beyond it). Occasionally a few packets would make it through, but this was fairly rare. I'm assuming that what happened here is the CPU on the router was overloaded. I wouldn't have expected this though, because the setup for the router is fairly simple. No filters, no routing protocols (all static), no nothing... Clifford Hammerschmidt <cliff () marketingtips com>: Windows 2000: Net access of any kind causes GPF's. Windows 98: Blue screen as soon as you try running anything. Frank v Waveren <fvw () var cx> Does nothing to a p166 with 16mb ram running win95 over a 10mbit. -- Elias Levy SecurityFocus.com http://www.securityfocus.com/
Current thread:
- 'cross site scripting' CERT advisory and MS, (continued)
- 'cross site scripting' CERT advisory and MS Eric Lecht (Feb 08)
- Re: 'cross site scripting' CERT advisory and MS Dustin Miller (Feb 09)
- Re: 'cross site scripting' CERT advisory and MS David LeBlanc (Feb 10)
- Re: 'cross site scripting' CERT advisory and MS Marc Slemko (Feb 11)
- Re: 'cross site scripting' CERT advisory and MS Rishi Lee Khan (Feb 14)
- Packet Tracing (linux klog patch) Dragos Ruiu (Feb 12)
- Re: Packet Tracing (linux klog patch) Andrzej Bialecki (Feb 15)
- Re: Packet Tracing (linux klog patch) Dragos Ruiu (Feb 17)
- Re: Packet Tracing (linux klog patch) Andrzej Bialecki (Feb 17)
- crash windows boxes on your local network (twinge.c) sinkhole () NILL NET (Feb 10)
- Re: crash windows boxes on your local network (twinge.c) Elias Levy (Feb 14)
- DDOS Attack Mitigation Elias Levy (Feb 11)
- TESO - Nameserver traffic amplify and NS route discovery Sebastian (Feb 12)
- Re: DDOS Attack Mitigation Darren Reed (Feb 13)
- Re: DDOS Attack Mitigation Alan Brown (Feb 14)
- Re: DDOS Attack Mitigation Darren Reed (Feb 14)
- NetBSD Security Advisory 1999-012 Daniel Carosone (Feb 15)
- Re: DDOS Attack Mitigation Chris Cappuccio (Feb 15)
- Re: DDOS Attack Mitigation Carson Gaspar (Feb 15)
- Re: DDOS Attack Mitigation John Edwards (Feb 15)
- Re: DDOS Attack Mitigation Ryan Russell (Feb 16)