Bugtraq mailing list archives

Re: OOB Bug stills persists after hot fix


From: ervin () NAME NET (Ervin Fried)
Date: Thu, 22 May 1997 15:05:37 -0400


At 01:41 PM 5/21/97 -0700, Ian Eure wrote:
Does this affect systems with sp3? Does the hotfix do anything at all to a
system that already has sp3?

just installed SP3

same effect:
crash with
STOP: 0x000000A ( ... )
IRQL_NOT_LESS_OR_EQUAL address ... has base at ... - tcpip.sys


On Tue, 20 May 1997, Ervin Fried wrote:

We applied the OOB hotfix to 2 NT Server 4.0, SP2 machines

Then we tested it with the Perl version of nuke (nuke.pl), on a Win95
machine.

Result: blue screen, reboot needed.

Are there any success stories about OOB hotfix?

Maybe is something particular to our servers ...


Ervin Fried

At 10:11 AM 5/19/97 -0500, Dan Freise wrote:
Matthew Dovey wrote:

http://pobox.leidenuniv.nl/%7Eewit/winnuke/, the Mac binary also listed
on that page appears to still be capable of downing an NT 4.0

       It does.
Does anyone know what is peculiar about the Mac implementation of the

       Oddly enough, there is nothing peculiar about the mac
implementation.
Upon compiling the mac source on two separate UNIX machines, the
resulting binary fails to crash an NT box.

       The obvious conclusion is that Apple's Open Transport somehow
sends a
different packet than most other TCP/IP implementations.

       If I get the time to dig the packets apart, I'll post the results
here
as well.
--
Dan Freise                 ____  http://autobahn.cascss.unt.edu/~dan
A&S Computing Services     \  /
(817) 565-4498              \/   dan () unt edu








Ervin



Current thread: