[4553] in bugtraq
Re: OOB Bug stills persists after hot fix
daemon@ATHENA.MIT.EDU (Ervin Fried)
Thu May 22 17:59:07 1997
Date: Thu, 22 May 1997 15:05:37 -0400
Reply-To: Ervin Fried <ervin@NAME.NET>
From: Ervin Fried <ervin@NAME.NET>
X-To: Ian Eure <root@psych0sis.peninsula.wednet.edu>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <Pine.LNX.3.95.970521134054.620C-100000@psych0sis.peninsula
.wednet.edu>
At 01:41 PM 5/21/97 -0700, Ian Eure wrote:
>Does this affect systems with sp3? Does the hotfix do anything at all to a
>system that already has sp3?
just installed SP3
same effect:
crash with
STOP: 0x000000A ( ... )
IRQL_NOT_LESS_OR_EQUAL address ... has base at ... - tcpip.sys
>
>On Tue, 20 May 1997, Ervin Fried wrote:
>
>> We applied the OOB hotfix to 2 NT Server 4.0, SP2 machines
>>
>> Then we tested it with the Perl version of nuke (nuke.pl), on a Win95
machine.
>>
>> Result: blue screen, reboot needed.
>>
>> Are there any success stories about OOB hotfix?
>>
>> Maybe is something particular to our servers ...
>>
>>
>> Ervin Fried
>>
>> At 10:11 AM 5/19/97 -0500, Dan Freise wrote:
>> >Matthew Dovey wrote:
>> >
>> >> http://pobox.leidenuniv.nl/%7Eewit/winnuke/, the Mac binary also listed
>> >> on that page appears to still be capable of downing an NT 4.0
>> >
>> > It does.
>> >> Does anyone know what is peculiar about the Mac implementation of the
>> >
>> > Oddly enough, there is nothing peculiar about the mac
implementation.
>> >Upon compiling the mac source on two separate UNIX machines, the
>> >resulting binary fails to crash an NT box.
>> >
>> > The obvious conclusion is that Apple's Open Transport somehow
sends a
>> >different packet than most other TCP/IP implementations.
>> >
>> > If I get the time to dig the packets apart, I'll post the results
>> here
>> >as well.
>> >--
>> >Dan Freise ____ http://autobahn.cascss.unt.edu/~dan
>> >A&S Computing Services \ /
>> >(817) 565-4498 \/ dan@unt.edu
>> >
>> >
>>
>
>
>
Ervin
