[14440] in bugtraq
Re: neat little napster bug
daemon@ATHENA.MIT.EDU (Markus Kern)
Wed Mar 29 01:32:09 2000
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <38E10707.5DE110F@gmx.net>
Date: Tue, 28 Mar 2000 21:24:55 +0200
Reply-To: Markus Kern <markus-kern@GMX.NET>
From: Markus Kern <markus-kern@GMX.NET>
X-To: BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Colten Edwards wrote:
> Seems that napster with it's closed source has a reason to be paranoid.
>
> The client napster.exe has a limit on the length of a line it will accept,
> somewhere around 191 chars. However the server will happily pass along
> any length you want upto possibly 32767 (unsigned short int). So, if you
> send a public msg or a possibly a privmsg to a channel/nick on the server,
> with a length longer than 191, it GPF's the client. This works with BETA5
> of the client and possibly earlier ones as well. I would ASSUME this could
> be developed into something else altogether. Way ta go napster, inc.
They seem to have fixed this at the server side.
When i tested it (04/28/00 20:10 GMT) only 180 characters were
passed through by the server. In both public and private chat.
Markus Kern