[10851] in bugtraq
Re: Novell NetWare webservers DoS
daemon@ATHENA.MIT.EDU (Artur Urbanowicz)
Thu Jun 17 12:24:30 1999
Message-Id: <BDB70A7573@golem.umcs.lublin.pl>
Date: Thu, 17 Jun 1999 17:10:48 +0100
Reply-To: Artur Urbanowicz <ARTUR@GOLEM.UMCS.LUBLIN.PL>
From: Artur Urbanowicz <ARTUR@GOLEM.UMCS.LUBLIN.PL>
To: BUGTRAQ@NETSPACE.ORG
Hello,
Przemyslaw Frasunek <venglin@LAGOON.FREEBSD.ORG.PL> writes:
> [...]
> Novell NetWare webservers remote denial of service
> <venglin@lagoon.freebsd.org.pl>
> [...]
> - Novell NetWare ?.? with YAWN/1.05 (crc:E8B0):
> Webserver crash.
>
> - Novell NetWare 3.12 with YAWN/1.05 (crc:E8B0):
> No problems.
>
> - Novell NetWare 4.11 with YAWN/1.05 (crc:E8B0):
> No problems.
> [...]
> ./www copernicus.9lo.lublin.pl 80 10 10000
> [...]
I have tested your exploit on Yawn HTTPD in various environment
(NetWare 3.11, 3.12, 4.10, 4.11) and I'm quite sure the program
should not crash the NetWare with my web server on the top.
Can anybody correct me or provide additional information?
Regards,
Artur Urbanowicz