full-disclosure - Internet Explorer 6 DoS Bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: killedbythoughts at mindcrime.net (Sebastian Niehaus)
Subject: Internet Explorer 6 DoS Bug

Brett Hutley <brett@...ley.net> writes:

> > If you enter C:\aux in the adressline of the IE (not EXPLORER,
> > InternetExplorer) and hit enter, the window will freeze. This bug
> > is simmilar to C:\con\con
> 
> The problem seems to be related to whether you have permissions to
> access the AUX device or not. I couldn't freeze explorer on my notebook
> where I don't have permissions to the aux device, but could on a
> co-workers machine in which we could access the aux device from the
> command line.

Which factors (default install?) influence the users permissions on
the aux-device?


Sebastian

--