Vulnerability Development: Re: iis (ftp) 4.0

[Michal Zalewski <lcamtuf () DIONE IDS PL>]

On Sun, 30 Jul 2000, Guilherme Mesquita wrote:

> hey doods take a look at this:
>
> ftp> quote cd
> %f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f%f
Damn, another one. WAKE UP! It's a bug in ftp client! There's even no such
command as 'CD' in ftp protocol... And Micro$oft ftpd daemon simply drops
every command that is too long, but I don't think it crashes.

_______________________________________________________
Michal Zalewski [lcamtuf () tpi pl] [tp.internet/security]
[http://lcamtuf.na.export.pl] <=--=> bash$ :(){ :|:&};:
=-----=> God is real, unless declared integer. <=-----=