Re: Webtrends HTTP Server %20 bug

From: H D Moore (hdmat_private)
Date: Mon Jun 04 2001 - 15:19:49 PDT

Next message: SChoe: "Re: $HOME buffer overflow in SunOS 5.8 x86"

Previous message: Ben Gollmer: "Re: TWIG SQL query bugs"
In reply to: Auriemma Luigi: "Webtrends HTTP Server %20 bug"
Next in thread: Eric Hacker: "RE: Webtrends HTTP Server %20 bug"
Reply: Eric Hacker: "RE: Webtrends HTTP Server %20 bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

A url-encoded character is NOT a unicode code character..

On Sunday 03 June 2001 05:41 am, Auriemma Luigi wrote:
> The bug is really simple. If the attacker insert an unicode space (%20)

Next message: SChoe: "Re: $HOME buffer overflow in SunOS 5.8 x86"
Previous message: Ben Gollmer: "Re: TWIG SQL query bugs"
In reply to: Auriemma Luigi: "Webtrends HTTP Server %20 bug"
Next in thread: Eric Hacker: "RE: Webtrends HTTP Server %20 bug"
Reply: Eric Hacker: "RE: Webtrends HTTP Server %20 bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Jun 05 2001 - 19:05:35 PDT