Vulnerability Development mailing list archives

Re: Denial of Service in Xitami webserver all versions...


From: graffix () GRAFFIX TZO COM (GraffiX)
Date: Wed, 5 Apr 2000 00:38:02 -0700


hahah!  Not a big deal...the point being that a fix was released for BOTH
versions (the broken 2.5b2 version), not just the broken 2.4d6 release you
mentioned.

Be advised, however, that it appears the NT *SERVICE* was *NOT* fixed in
2.4d7 (still crashes on telnet:  GET <space> <enter> <enter> ), the console
versions appear to be fixed though.

Peace,
GraffiX

At 02:17 AM 4/5/00 +0100, you wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

GraffiX, how-do-you-do!

      On 05/04/2000 it is highly likely that you wrote this:

G> Ummm....actually, they released the fix for BOTH platforms (2.4d7 and
G> 2.5b3) yesterday, March 3rd, based on the lengthy discussions in the Xitami
G> mailing list we've been having for days now regarding these DoS
G> bugs.  Below is the release info:

Whatever! Yes, I mailed the info from this list to IMatix the other day (1st
April) . If Pieter Hintjens posted the fixes for both platforms on the 3rd
April (i think that's when you meant), then the info did the job ;) I take
zero credit, and am not attempting to either. Just thought that it might be
Ok to post this info as I got a reply from Pieter Hintjens the other day and
forgot to post info here in a timely fashion. Hope this has not upset anyone.

(I've been following _all_ of the discussion by the way and wasn't trying to
steal anyone's glory)

-=* graffix () graffix tzo com *=-

"There are 100,000 total marijuana smokers in the US, and most are
Negroes, Hispanics, Filipinos and entertainers.  Their Satanic music,
jazz and swing, result from marijuana usage. This marijuana causes
white women to seek sexual relations with Negroes, entertainers and
any others."
- Harry Anslinger, testifying to Congress, 1937


Current thread: