what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New


Posted Feb 29, 2000
Authored by nemesystm | Site dhc1.cjb.net

The Xitami Windows 95/98 webserver is vulnerable to a remote DoS attack.

tags | exploit, remote, denial of service
systems | windows
SHA-256 | 64fd8af32411e699883ac1a9b8fdeeccfc5dc800bea17a82b88105de457d8d4d


Change Mirror Download
+++>===] Written by Nemesystm, member of the DHC [===<+++
++++>==] Visit us at dhc1.cjb.net You want 2 [==<++++

Subject: Xitami 2.4d4 win95/98 DoS
Description program: Xitami is a HTTP Server with a FTP daemon, etc.
Description DoS: Simply by connecting and disconnecting to a port Xitami
opens, you can completely lock up the server.

<-[what was used]->
Xitami 2.4d4 for Windows 95/98 downloaded from tucows.com
Installed with the typical installation, no standard settings changed.
This problem worked on: Windows 98 + IE5.0 and Windows NT 4.0 SP5
Xitami 2.4d6 (current version, same settings, not tested in WinNT no problem
in W98)
Xitami 2.5d2 Beta (version to come up, not tested in WinNT no problem W98)

<-[how to create the problem]->
telnet to victim.com 81
or whatever you feel like to connect to port 81.
then just hit enter or disconnect. Either way, on the server side the error
"assertion failed!" shows up, and as long as it's there, no connection whatsoever
can be made to the HTTP service nor the FTP Service nor port 81 (where LWRP
listens on, for a description on what that is, see the documentation that
comes with Xitami)
The message says: "Module E:\IMATIX\DEVELOP\SMT\XILRWP.C, line 265"
You then get three choices: Abort, Retry and Ignore. Retry and Ignore make
it that you can continue without a problem, (even though the server was
unreachable for as long as the error message was there), Abort however kills
the server and gives a Microsoft Visual C++ Runtime error. (abnormal program

<-[so what]->
This might not seem to be a big problem at first: just check the monitor
every once in a while, but what if you're not working? What if it's weekend?
What if it's at night? There's no telling how many people weren't able to
see the site while you're gone.

The logs show nothing spectacular.
console.log in /logs says:
2000/01/14/11:23:45: xilrwp: Peer failed to connect (ERROR: Malformed startup
xitami.log shows something similar.
No IP addresses from the culprit. 8-)

Well, I waited with this till the new version was out. The new one doesn't
have the problem, nor does the beta version. I suggest getting that, or
making sure no connections to port 81 are allowed.
It's available at www.imatix.com.

nemesystm, leader of the DHC (dhc1.cjb.net)

>>>The End<<<
auto45040@hushmail.com for questions.

Login or Register to add favorites

File Archive:

August 2022

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Aug 1st
    20 Files
  • 2
    Aug 2nd
    4 Files
  • 3
    Aug 3rd
    6 Files
  • 4
    Aug 4th
    55 Files
  • 5
    Aug 5th
    16 Files
  • 6
    Aug 6th
    0 Files
  • 7
    Aug 7th
    0 Files
  • 8
    Aug 8th
    13 Files
  • 9
    Aug 9th
    13 Files
  • 10
    Aug 10th
    34 Files
  • 11
    Aug 11th
    16 Files
  • 12
    Aug 12th
    5 Files
  • 13
    Aug 13th
    0 Files
  • 14
    Aug 14th
    0 Files
  • 15
    Aug 15th
    25 Files
  • 16
    Aug 16th
    3 Files
  • 17
    Aug 17th
    0 Files
  • 18
    Aug 18th
    0 Files
  • 19
    Aug 19th
    0 Files
  • 20
    Aug 20th
    0 Files
  • 21
    Aug 21st
    0 Files
  • 22
    Aug 22nd
    0 Files
  • 23
    Aug 23rd
    0 Files
  • 24
    Aug 24th
    0 Files
  • 25
    Aug 25th
    0 Files
  • 26
    Aug 26th
    0 Files
  • 27
    Aug 27th
    0 Files
  • 28
    Aug 28th
    0 Files
  • 29
    Aug 29th
    0 Files
  • 30
    Aug 30th
    0 Files
  • 31
    Aug 31st
    0 Files

Top Authors In Last 30 Days

File Tags


packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By