[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <3F6052DE.8090205@ion.lu>
Date: Thu, 11 Sep 2003 12:47:58 +0200
From: Steve Clement <steve@....lu>
To: hUNTER 007 <door_hunt3r@...ckcodemail.com>
Cc: bugtraq@...urityfocus.com
Subject: Re: Winrar doesn't determine the actual size of compressed files+possibility
of DoS attack on server!
Someone should check if MacOSX's Stuffit Standard is fine with this.
Because when I clicked on the link it downloaded the rar automagically
and off course extracted it for me.
so I ended up with a nice 1Gb (0 Bytes on disk) file.
cheers,
Steve
--
ION Network Solutions
Steve Clement
Unix System Administrator
13, rue des Ardennes
L-1133 Luxembourg
Tel: +352 261 276-2
Fax: +352 261 276-9
mailto:steve@....lu
http://www.ion.lu
Powered by blists - more mailing lists