Re: Linux, too, sot of (Windows MS-DOS Device Name DoS vulnerabilities)

From: Jeffrey W. Baker (jwbakerat_private)
Date: Wed Jul 18 2001 - 09:54:12 PDT

  • Next message: David F. Skoll: "Re: Linux, too, sot of (Windows MS-DOS Device Name DoS vulnerabilities)"

    On Wed, 18 Jul 2001, Ishikawa wrote:
    
    > The next is a showstopper.
    > The problem URL that caused the hung of browser,
    > at least, on my PC is the following.
    >
    >     file:///dev/pty0
    >
    > This locked my netscape navigator solid.
    > I had to kill it using kill command from another
    > xterm window. X didn't get hung, etc..
    > Since trying other devices may cause more severe problems
    > I stopped testing here.
    
    Using <img src="file:///dev/tty0"> on my Linux machine caused Netscape and
    Mozilla both to eat all the keyboard input.  I had to use another machine
    to kill it.  I expected Netscape to NOT open file URIs from within a page
    fetched via !file (http, https, ftp, gopher, etc.).
    
    -jwb
    



    This archive was generated by hypermail 2b30 : Wed Jul 18 2001 - 10:26:18 PDT