[aklug] Re: Bad Packet

From: Tom Simes <simestd@netexpress.com>
Date: Wed Nov 03 2010 - 14:05:22 AKDT

On 11/03/10 13:57, adam bultman wrote:
>
>
> Damien Hull wrote:
>> Sent from my iPhone
>>
>> On Nov 3, 2010, at 12:37 PM, Christopher Howard<cmhoward@frigidcode.com> wrote:
>>
>>
>>> On Wed, Nov 03, 2010 at 10:47:06AM -0800, Damien Hull wrote:
>>>
>>>> Is there a malformed or "bad packet" that can take down Apache?
>>>> I just added very basic iptables rules to my webserver. If there is a bad
>>>> packet I would like iptables to block it. If it's possible.
>>>>
>>>>
>>>>
>>> This stream will hang any Apache instance:
>>>
>>> 436875636B204E6F72726973
>>>
>>> --
>>> Christopher Howard
>>> frigidcode.com
>>> theologia.indicium.us
>>>
>>
>> Okay... How does one send it that string? I want to see this in action.
>> ---------
>>
>
> Hang around Texas and do bad stuff from 1993 through 2001.

It's easy:

echo "436875636B204E6F72726973" > /usr/local/sbin/httpd

sudo apachectl restart

Kills it dead every time for me ;)

** Your experience may vary, and could involve a re-install...

-- 
Tom
======================================================================
    "Z-80 system stack overflow.  Shut 'er down Scotty, the system's
          sucking mud" - Error message on TRS 80 Model-16B
Tom Simes                                       simestd@netexpress.com
======================================================================
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Wed Nov 3 14:05:31 2010

This archive was generated by hypermail 2.1.8 : Wed Nov 03 2010 - 14:05:31 AKDT