Vulnerability Development mailing list archives

Re: Explorer crashes when it sees this .lnk file


From: pmal () SPACE GR (Panagiotis Malakoudis)
Date: Fri, 31 Mar 2000 08:30:10 +0300


As mentioned by Vladimir Dubrovin this was used to crash the ServU ftp
server.
I downloaded ServU 2.5e and tryied to attack the server with LIST.
I couldn't crash the server but my only my connection.
Does anyone know what version of ServU is vulnerable to his attack?

Panagiotis Malakoudis

Systems Administrator
Space Hellas S.A.

----- Original Message -----
From: "James A. Robbins" <robbins.7 () OSU EDU>
To: <VULN-DEV () SECURITYFOCUS COM>
Sent: Thursday, March 30, 2000 6:31 PM
Subject: Re: Explorer crashes when it sees this .lnk file

I couldn't even read the message.  Eudora would crash when
it tried to open it.  Scrolling down to try to see the file would
crash Windows 98 when the file just came into view in the
window.

From: Parity Error [mailto:bootup () MAIL RU]
Sent: Tuesday, March 28, 2000 3:47 PM
To: VULN-DEV () SECURITYFOCUS COM
Subject: Explorer crashes when it sees this .lnk file

Hi all,

Explorer crashes when it "sees" this .lnk file in a
directory. Looks like some
decoding code for .lnk files crashes when it sees this. The code
seems to be in a shared dll. U cannot edit this file using
any windows based
hex editor. All apps crash when they see this. This may be
exploitable, ....

--
James A. Robbins
Senior Design Engineer, Network Engineer
The Ohio State University
Chemistry Department


Current thread: