Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Web :: Servers :: mspwsovf.txt

Microsoft personal web server overflow

Date: Thu, 15 Jan 1998 12:03:30 -0700
From: Gurney Halleck <>
To: dc-stuff <>
Subject: Buffer overflow with MS PWS

I don't know if this has ever been reported.  I did check MS Technical
support but didn't find anything.

While goofing with MS Personal Web Server (pws32/ that came
packaged with FrontPage 97 and running under NT 3.51 , I found that the
following URL will crash PWS.


Where PWS_Name is the domain name of the PWS server and the long string
is 159 chars.

I have no idea if it is exploitable beyond just crashing PWS.
It bombs out with an Exception: access violation as reported by Dr.
Gurney Halleck <>
Visit my Web 'Zine: Little Albert ( )
For my pub key:
Key fingerprint =  C7 D3 2F 1D 16 7F FC E4  A3 95 D7 AD C0 38 9D AC

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH