OpenBSD 2.9 and Zope problem

[Giorgos Verigakis <verigak@algol.vtrip-ltd.com>]

Hello, I'm using OpenBSD 2.9 release and Zope 2.3.3
I tried to run an exploit for IIS on Zope and the result was
that Zope stopped responding as long as the exploit was running
and the CPU usage was going to 100%.
I tried the same thing but with different OS and there was no
problem (I tried win2000 and Linux, I haven't tried FreeBSD yet)
Also, at times I got an error from libc_r (I couldn't reproduce it)
and Zope stopped responding even when the exploit was not running.

Since 2.8 had some problems with threads, I suspect that again
the thread implementation is causing this.

Is this problem known? Am I correct that this is a thread problem?


You can find the IIS exploit (iisdos.exe) at:
http://www.securityfocus.com/frames/?content=/vdb/bottom.html%3fsection%3dexploit%26vid%3d1190


Giorgos Verigakis
Virtual Trip