[UPDATE] On WinSock 2.2 Woes

[raj () CEERI ERNET IN (Raj Singh)]

Hi,

I was also one of the people who reported the WinSock 2.2 problems in late
March, 1998 to the BugTraq list as well as to Microsoft. I received the
following update reply from Microsoft about 10-12 days back. I am sorry
not to have immediately forwarded this to the BugTraq list. The recent
message on this jogged my memory.

-- Raj

---------- Forwarded message ----------

From: Rick Plant <rplant () microsoft com>

A new version of the update has been posted which addresses this issue. You
can download it and install overtop the original update. It's available from
http://www.microsoft.com/windows95/info/ws2.htm

Thank you for your patience.

Rick Plant
Microsoft


From:   Raj Singh[SMTP:RAJ () CEERI ERNET IN]
Sent:   Friday, April 03, 1998 5:30:42 AM
To:     Microsoft Product Security Issues
Subject:        Re: WinSock 2.2 Woes
Auto forwarded by a Rule

Hi,

I have received no reply to the enclosed email as yet. Has this problem in
WinSock 2.2 resolved ?

-- Raj

---------- Forwarded message ----------
Date: Tue, 17 Mar 1998 11:01:06 +0530 (IST)

Hi,

I too reproduced the errors in Netscape3.01, IE and WS_FTP32 when the
ws2setup.exe patch from Microsoft was applied to a Win95 system (which
originally had WinSock 1.1).

The addresses that gave the errors were :

www.raen.com.br (reported earlier)
www.ceeri-p.net (non-existent address, crashes the application)
ftp.ceeri-p.net (non-existent address, crashes the application)

Note that all the above are 15 characters in total including the dots.

Once these kind of addresses are given and the application (netscape, ie,A
ws_ftp) has crashed, any other address (of any number of characters) also
crashes the application !!

Some times, the system also crashes and hangs. Hard reboot is the only
solution to resolving the above problems.

It is surprising that the patch has been out since January, 1998 and this
has not been taken care of as yet. The patch solves one problem (works
against teardrop, land, boink attacks ?) but creates other problems for
programs that use WinSock.

-- Raj