>Number: 3574 >Category: os-windows >Synopsis: Down the Server via Batch file. >Confidential: no >Severity: critical >Priority: medium >Responsible: apache >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Tue Dec 22 02:10:00 PST 1998 >Last-Modified: >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.3.2 @ Win 32 >Environment: Windows 95 Pentium 200MMX and Windows NT >Description: Whn you put a .bat file with the following content (+LineFeed) in a CGI-Executable directory an acces it via TELNET on Port 80 than the SERVER will go down:
hello.bat: echo HelloDown TELNET command:GET /cgi-bin/hello.bat >How-To-Repeat: >Fix: >Audit-Trail: >Unformatted: [In order for any reply to be added to the PR database, ] [you need to include <[EMAIL PROTECTED]> in the Cc line ] [and leave the subject line UNCHANGED. This is not done] [automatically because of the potential for mail loops. ] [If you do not include this Cc, your reply may be ig- ] [nored unless you are responding to an explicit request ] [from a developer. ] [Reply only with text; DO NOT SEND ATTACHMENTS! ]
