bug #596784

[Calum]

yep, this will only work on win85, win98 and win98se, and even then it will only work when people use IE. Also, they can download a patch from Microsoft (which was made available in 2000, wow that was quick!) which will clear up the bug even with win9x and IE. So don't count on getting many people with it, except people who are not too bothered about using the latest kit.

If you find out a similar exploit for the win2000/XP(NT) setups, please. please do post it here...

If you are putting it on yr own site, use this html: <img src=C:\Con\Con> rather than putting the "file:" at the start. That's just a way of getting around the BBCode restrictions.

[ June 10, 2002: Message edited by: Calum ]

[voidmain]

quote:Originally posted by Chooco:
http://shawnserver.dhs.org/junk/crash.php

there you go my good man      

give this error for some reason:
Warning: Cannot add header information - headers already sent by (output started at C:\program files\apache\realdocs\junk\crash.php:10) in C:\program files\apache\realdocs\junk\crash.php on line 10

[ June 10, 2002: Message edited by: Chooco ]

Line 10?  Looks like you put this on a Winblows machine. Put it on a real server running Apache/PHP and it will work.

[foobar]

wow d00dz, this is really great.
So, all you have to do is make someone click the link, or if you'd put it in an image, it'd crash immediately?

Just one thing :            

Correction: Two things: The second is:
Does it needs to be \CON\CON ? Can it also be something else?

[ June 10, 2002: Message edited by: -=f00bar=- ]

[voidmain]

CON is a special device name (for "CONSOLE" or "SCREEN") in DOS so I would guess it has to be CON. Has anyone tried any of the other device names like PRN, LPT1, COM1, etc? If I get 'nuf energy up to fire up my Win98 VMware session I'll give it a shot.

[Calum]

there's actually another topic about this same thing and on it I posted this link, which should explain the situation fully.

[voidmain]

Ahhh, that answers that question.  Thanks Calum!

[Chooco]

quote:Line 10? Looks like you put this on a Winblows machine. Put it on a real server running Apache/PHP and it will work.

dude that fucking is Apache 1.32 with PHP4 and it DOES NOT WORK

[voidmain]

Dude, you won't find "C:\Program Files\*" on a "real" server. All I can say is it works just fine on a "real" server (*NIX) running Apache/PHP. You probably have more than just one line in your file, like maybe \r\n terminated instead of just \n terminated line because of the DOS line termination which plays hell on headers.  Also have this problem with IIS and Perl.  Put it on a *NIX server and it will work fine.

[EDIT] If your operating system of choice is Linux as your profile states what the hell are you running Apache on an M$ machine for? I still can't figure out why anyone in their right mind would do such a thing.

[ June 11, 2002: Message edited by: VoidMain ]