[Previous] [Next] [Index]
[Thread]
Re: CIAC Advisory F-11 Report: Unix NCSA httpd Vulnerability
In message <95Feb15.115315+0900_met.63660-2+13@dxal18.cern.ch> you write:
> The parts of the Daemon I have checked are based on buffer append routines.
>-But
> there are quite a few of them so its possible one has been missed. I will se
>-e if
> someone can check it out just to be on the safe side.
Well, I've just been over the HTLoadError routine and it certainly
does unchecked sprintf's to a fixed size buffer when composing the
error message (same in HTErrorMsg). No user input is used here,
thoug, so it may not be harmful. It just left me wondering where
else such things might be lurking ...
(I added the sc.hostname to the `CERN httpd 3.0' at the bottom of
the error messages, as I regularly use several httpds in a proxy
chain and it is always nice to know on which one the error occured.
The changes are trivial, but I'll send diffs to anyone who wants)
\Bernhard.
Follow-Ups:
References: