[21388] in bugtraq
Windows MS-DOS Device Name DoS vulnerabilities
daemon@ATHENA.MIT.EDU (richardca@hushmail.com)
Sat Jul 7 16:12:54 2001
From: richardca@hushmail.com
Message-Id: <200107062142.OAA02756@user3.hushmail.com>
Date: Fri, 6 Jul 2001 17:43:41 -0500 (EDT)
To: bugtraq@securityfocus.com
Mime-version: 1.0
Content-type: multipart/mixed; boundary="Hushpart_boundary_iXtxwjaQPTUsIUVwOHKThlXnywOVkfDs"
--Hushpart_boundary_iXtxwjaQPTUsIUVwOHKThlXnywOVkfDs
Content-type: text/plain
Uhmm,
I was thinking, some of the advisories published only talked about requesting
a device name. the ms site says two or more. the issue you name is only
win9x, yet some guy posted about a problem in NT today using ONE device
name.
Win ME was also affeccted in some advisories. One would expect it to be
fixed in that edition of windows if this is indeed the same problem.
Some advisories say the box would just lock up not give any blue screen.
Am I missing something here?
>AFFECTED SYSTEMS
>
>Microsoft Windows 95
>Microsoft Windows 98
>Microsoft Windows 98 SE
>
>CONCLUSION : patch your OS, and stop whining about so
>called 'bugs' in applications, you will never be able
>to completely patch the problem that way.
>
>PATCH
>
>Go to the Microsoft Knowledge Base @
>http://search.support.microsoft.com/kb/c.asp
>
>And find the article with article ID Q256015
>(titled Fatal Exception 0E with Multiple MS-DOS Device
>Names in Path)
Free, encrypted, secure Web-based email at www.hushmail.com
--Hushpart_boundary_iXtxwjaQPTUsIUVwOHKThlXnywOVkfDs--