Re: Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web Server v2.0.2 Beta 1

From: Holger Zimmermann (zimpelat_private)
Date: Thu Jun 05 2003 - 09:38:54 PDT

Next message: bugzillaat_private: "[Full-Disclosure] [RHSA-2003:070-01] Updated hanterm packages provide security fixes"

Previous message: Martin: "Monkey Http Daemon"
Maybe in reply to: Rushjoat_private: "Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web Server v2.0.2 Beta 1"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

('binary' encoding is not supported, stored as-is) In-Reply-To: <3EDBB632.4030000at_private> The problem has been encountered with the Win32 version of Pi3Web 2.0.2 beta 1, a pre-released beta for public testing. As I determined, it is not necessary, to have specific configuration options set in order to reproduce the exploit (maybe dependent on the runtime-environment). The problem is fixed in Pi3Web 2.0.2 beta 2, available from: http://belnet.dl.sourceforge.net/sourceforge/pi3web/Pi3Web-x86Win32-2_0_2-beta2.exe Pi3Web 2.0.2 beta 1 is no more available and has been available for only about one week (5 downloads of Pi3Web 2.0.2 beta 1 registered at sourceforge). -- Holger Zimmermann

Next message: bugzillaat_private: "[Full-Disclosure] [RHSA-2003:070-01] Updated hanterm packages provide security fixes"
Previous message: Martin: "Monkey Http Daemon"
Maybe in reply to: Rushjoat_private: "Tripbit Advisory TA-2003-05 Buffer Overflow Vulnerability in Pi3 Web Server v2.0.2 Beta 1"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jun 05 2003 - 12:54:13 PDT