full-disclosure - IE sp2 and Mozilla Firefox DoS.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0BKn9uKnWEeCDU7Vx+IAQ8KAAAAQAAAAEhyR+6/SdkaATbdUWOeQUgEAAAAA@online.gateway.expertworks.net>
From: aditya.deshmukh at online.gateway.expertworks.net (ALD, Aditya,
	Aditya Lalit Deshmukh)
Subject: IE sp2 and Mozilla Firefox DoS.

>
>Both Firefox & IE supports decompression method 'gzip'
>ie. an extended request header named
>HTTP_ACCEPT_ENCODING like 
>HTTP_ACCEPT_ENCODING=gzip,deflate 


>By this way, the file can be kept around few kilobytes
>in the server and delivered easily. I wonder, why
>such... simple issue went un-noticed to everyone for
>years... 


Dear bipin, 

Good observation ! Works for me on mozilla 1.7.5 also on win2k sp4 and all
other patches 

But Is this not a small issue that can happen to kind of data? .... 3.5 mb
of data as a pic image or a pic with very high width will also do the same
and there will certainly be more of such doss` 

-aditya



________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)