bugtraq - Re: Winrar doesn't determine the actual size of compressed files+possibility of DoS attack on server!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 11 Sep 2003 12:47:58 +0200
From: Steve Clement <steve@....lu>
To: hUNTER 007 <door_hunt3r@...ckcodemail.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Winrar doesn't determine the actual size of compressed    files+possibility
 of DoS attack on server!

Someone should check if MacOSX's Stuffit Standard is fine with this.

Because when I clicked on the link it downloaded the rar automagically 
and off course extracted it for me.

so I ended up with a nice 1Gb (0 Bytes on disk) file.

cheers,

Steve

-- 
ION Network Solutions
Steve Clement
Unix System Administrator
13, rue des Ardennes
L-1133 Luxembourg
Tel: +352 261 276-2
Fax: +352 261 276-9
mailto:steve@....lu
http://www.ion.lu