Full Disclosure mailing list archives
RE: Does the Windows AUX bug affect Web servers also?
From: "Adam" <rabbit () wnonline net>
Date: Wed, 9 Jul 2003 12:19:35 -0500
I tested this on our only Win2K SP4 machine and the first time I entered the url http://www.somebody.com/aux ( where somebody was changed to one of our sites ) I was pinging the server. The pings locked up and had 85% packet loss. I then checked the site and it came up and the pinging started working again. The server didn't crash but paused for a second. Unable to duplicate the previous results. The link had no affect on the server a second time. Adam Richards Network Administrator WorldNet Communications, Inc. 318-213-9827 / Fax 318-213-8534 World Class Technology, Hometown Service -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]On Behalf Of Richard M. Smith Sent: Wednesday, July 09, 2003 11:50 AM To: full-disclosure () lists netsys com Subject: [Full-disclosure] Does the Windows AUX bug affect Web servers also? Is it possible to also crash a Web server hosted on a Windows box using a URL something like: http://www.somebody.com/aux If this particular URL is okay, maybe there are other URLs that will cause a crash. For example, POSTing a form to a URL containing AUX. This problem could be in any Windows Web server such as IIS, Apache, ColdFusion, etc.. (I don't have access to a Windows Web server to try this out myself.) Richard -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of xc3ed () phreaker net Sent: Wednesday, July 09, 2003 7:39 AM To: full-disclosure () lists netsys com Cc: KF Subject: Re: [Full-disclosure] Internet Explorer 6 DoS Bug duplicated in Windows 2003 Server, datacenter edition, IE v6.0.3790.0 regards, xsr _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Internet Explorer 6 DoS Bug fabian . becker2 (Jul 07)
- Re: Internet Explorer 6 DoS Bug KF (Jul 07)
- RE: Internet Explorer 6 DoS Bug Joe Hummel (Jul 07)
- Re: Internet Explorer 6 DoS Bug Dave (Jul 07)
- AW: Internet Explorer 6 DoS Bug Michael Linke (Jul 07)
- Re: Internet Explorer 6 DoS Bug xc3ed (Jul 09)
- Does the Windows AUX bug affect Web servers also? Richard M. Smith (Jul 09)
- RE: Does the Windows AUX bug affect Web servers also? Gabriel Lawrence (Jul 09)
- RE: Does the Windows AUX bug affect Web servers also? Adam (Jul 09)
- SV: Does the Windows AUX bug affect Web servers also? Peter Kruse (Jul 09)
- Re: Does the Windows AUX bug affect Web servers also? jelmer (Jul 10)
- Re: Does the Windows AUX bug affect Web servers also? morning_wood (Jul 09)
- Re: Does the Windows AUX bug affect Web servers also? Matthew Murphy (Jul 09)
- Re: Does the Windows AUX bug affect Web servers also? morning_wood (Jul 10)
- RE: Internet Explorer 6 DoS Bug Joe Hummel (Jul 07)
- Re: Internet Explorer 6 DoS Bug KF (Jul 07)
- Re: Internet Explorer 6 DoS Bug madsaxon (Jul 07)
- Re: Internet Explorer 6 DoS Bug Nik Reiman (Jul 07)