Re: Winrar doesn't determine the actual size of compressed files+possibility of DoS attack on server!

To: hUNTER 007 <door_hunt3r@xxxxxxxxxxxxxxxxx>
Subject: Re: Winrar doesn't determine the actual size of compressed files+possibility of DoS attack on server!
From: Steve Clement <steve@xxxxxx>
Date: Thu, 11 Sep 2003 12:47:58 +0200
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20030910034646.27599.qmail@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <20030910034646.27599.qmail@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5b) Gecko/20030727 Thunderbird/0.1

Someone should check if MacOSX's Stuffit Standard is fine with this.

Because when I clicked on the link it downloaded the rar automagicallyand off course extracted it for me.


so I ended up with a nice 1Gb (0 Bytes on disk) file.


cheers,

Steve

--
ION Network Solutions
Steve Clement
Unix System Administrator
13, rue des Ardennes
L-1133 Luxembourg
Tel: +352 261 276-2
Fax: +352 261 276-9
mailto:steve@xxxxxx
http://www.ion.lu

References:
- Winrar doesn't determine the actual size of compressed files+possibility of DoS attack on server!
  - From: hUNTER 007

Prev by Date: [slackware-security] security issues in pine (SSA:2003-253-01)
Next by Date: Invision Power Board : XSS in [FONT] and [COLOR] tags.
Previous by thread: Winrar doesn't determine the actual size of compressed files+possibility of DoS attack on server!
Next by thread: MSIE->NAFjpuInHistory
Index(es):
- Date
- Thread