Re: Q: FTP closes connection on too long HELP|USER|PASS-String
From: Felix Schattschneider (felix_schattschneider@ccmconsult.de)
Date: 12/09/02
- Next message: Anand: "IIS Authentication Methods."
- Previous message: Felix Schattschneider: "Q: FTP closes connection on too long HELP|USER|PASS-String"
- In reply to: Felix Schattschneider: "Q: FTP closes connection on too long HELP|USER|PASS-String"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Felix Schattschneider <felix_schattschneider@ccmconsult.de> Date: Mon, 09 Dec 2002 12:24:46 +0100
Felix Schattschneider wrote:
> Hi,
>
> On doing some checks I found that IIS-4.0 ftp service on NT 4 behaves
> strangely when sending a long (>4096) String as an argument to the USER,
> HELP or PASS command: it closes the connection. Now I wonder whether this
> is a feature (ahem)or some (buffer overflow) bug? Usually, a ftp server
> should give some error message and then wait for the next command. I tried
> searches on google (groups) and securityfocus and microsoft, but didn't
> find anything on that topic.
> IS this a known issue?
OK, I should have waited some time before I posted this. I just tried the
same thing on a 5.0-Server, and it gives more information:
500 command too long
421 closing connection
So it seems as if this behavior is on purpose (if this is conforming to rfc
is another question, gotta check that)
Felix
- Next message: Anand: "IIS Authentication Methods."
- Previous message: Felix Schattschneider: "Q: FTP closes connection on too long HELP|USER|PASS-String"
- In reply to: Felix Schattschneider: "Q: FTP closes connection on too long HELP|USER|PASS-String"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
