Date: Tue, 18 May 1999 10:39:33 -0600 From: Wes Peters <wes@softweyr.com> To: "Rashid N. Achilov" <shelton@granch.ru> Cc: Roger Marquis <marquis@roble.com>, security@FreeBSD.ORG Subject: Re: HTML DOS? (http://microsoft.com/NTServer/all/Downloads.asp) Message-ID: <374197C5.AD8734F5@softweyr.com> References: <Pine.GSO.3.96.990517072214.22349A-100000@roble2.roble.com> <37412A96.99E83C0E@granch.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
"Rashid N. Achilov" wrote: > > Roger Marquis wrote: > > > > Has anyone attempted to browse: > > > > http://microsoft.com/NTServer/all/Downloads.asp > > > > using Netscape Navigator and noticed what seems to be an HTML denial of > > service? I've tested this page with Javascript on and off, Java on and > > off, cookies on and off, stylesheets off, under FreeBSD, Linux and > > Solaris and the behavior is consistent: > > > > * Navigator freezes for several seconds > > * CPU utilization climbs briefly to near 100% > > * memory usage climbs by 11MB > > * the 11MB or memory are not released even after leaving > > the page and clearing disk and RAM caches. > > > > > > After 7 minutes loading Netscape break with core dump :-( CPU > utilization slowly up to 80%, next going in swap reading state, CPU > utilization down, Netscape down with core dump :-(...FreeBSD 2.2.8, 32Mb > RAM, Java on, JScript on, cookies on. Netscape Communicator 4.51 english Machine: PII/300, 64MB, NeoMagic 128. Netscape: 4.51 Linux/ELF FreeBSD: 3.1-RELEASE Netscape topped out at 83.45% CPU, but drew the page in 1:05. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC http://www.softweyr.com/~softweyr wes@softweyr.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?374197C5.AD8734F5>