[10851] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Novell NetWare webservers DoS

daemon@ATHENA.MIT.EDU (Artur Urbanowicz)
Thu Jun 17 12:24:30 1999

Message-Id: <BDB70A7573@golem.umcs.lublin.pl>
Date: 	Thu, 17 Jun 1999 17:10:48 +0100
Reply-To: Artur Urbanowicz <ARTUR@GOLEM.UMCS.LUBLIN.PL>
From: Artur Urbanowicz <ARTUR@GOLEM.UMCS.LUBLIN.PL>
To: BUGTRAQ@NETSPACE.ORG

Hello,

Przemyslaw Frasunek <venglin@LAGOON.FREEBSD.ORG.PL> writes:
> [...]
>               Novell NetWare webservers remote denial of service
>                        <venglin@lagoon.freebsd.org.pl>
> [...]
>   - Novell NetWare ?.? with YAWN/1.05 (crc:E8B0):
>     Webserver crash.
>
>   - Novell NetWare 3.12 with YAWN/1.05 (crc:E8B0):
>     No problems.
>
>   - Novell NetWare 4.11 with YAWN/1.05 (crc:E8B0):
>     No problems.
> [...]
>  ./www copernicus.9lo.lublin.pl 80 10 10000
> [...]

I have tested your exploit on Yawn HTTPD in various environment
(NetWare 3.11, 3.12, 4.10, 4.11) and I'm quite sure the program
should not crash the NetWare with my web server on the top.
Can anybody correct me or provide additional information?

Regards,
Artur Urbanowicz

home help back first fref pref prev next nref lref last post