no the prograner just hit the [enter] key, when u look on HEX u see 0d10 0d10 for two blocks we found that ot was working like that for almost a year, but this page will take the server down theb only change we can think of was sp3 ?
beny ----- Original Message ----- From: "Sam Thompson" <[EMAIL PROTECTED]> To: "ActiveServerPages" <[EMAIL PROTECTED]> Sent: Monday, September 02, 2002 10:36 AM Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy???? > what did the code look like? > > <pre><%=CrLf%></pre> ? > > Sam Thompson > ---------------------------------------------- > 2cs Communications Ltd > http://www.2cs.com > [EMAIL PROTECTED] > T: 01473 622263 > F: 01473 622515 > ----------------------------------------------- > ----- Original Message ----- > From: "Ben Jacob" <[EMAIL PROTECTED]> > To: "ActiveServerPages" <[EMAIL PROTECTED]> > Sent: Saturday, August 31, 2002 11:46 PM > Subject: IIS bug with <pre> CRLF</pre> or am I carazy???? > > > > Here is a weird story/IIs bug. For 4 days production server was down, > every > > thing look normal, no error on the log but the sites were behaving like > > under an external attack. It toke to serve a asp page up to 5 minutes and > if > > we did not shut down the IIS after few hours the server become > unaccessible > > and require power hard boot. We look every where found nothing (I was sure > > it is a virus or Trojan). By try and error we identified one site that > > cause the problem (there are more than 30 sites there). > > > > Make the long story short we found a asp file with <pre></pre> with 480 > > CRLF in between. Don't ask me why the html programmer did it, I do not > care, > > but if it is true it means that a simple html code can take down a server > > (even a user on a forum / form that allow to post text with html tags) > > > > Can some one test it? For some internal problems we will not have access > to > > test server till Tuesday. And I am not daring to try it on production one > > more time. > > > > I am not even sure it is the problem. All we know is that the site with > this > > asp file was causing the problem and I can not take them down one more > time. > > > > > > > > thank > > > > Beny > > > > > > > > --- > > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED] > > To unsubscribe send a blank email to > %%email.unsub%% > > > > > --- > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED] > To unsubscribe send a blank email to %%email.unsub%% > --- You are currently subscribed to activeserverpages as: [email protected] To unsubscribe send a blank email to [EMAIL PROTECTED]
