11226 - Oracle 9iAS default error information disclosure

From: Paul Johnston (paulat_private)
Date: Mon Feb 17 2003 - 06:24:34 PST

  • Next message: Javier Fernandez-Sanguino: "Re: 11226 - Oracle 9iAS default error information disclosure" 

    Hi,

I noticed this in the plugin:

          path = location;
# Why doesn't this work?
#          ereg_replace(pattern: string("(java.io.FileNotFoundException: 
)(.*)(",errorjsp,")(\(No such file or directory\))"), replace:"\2", 
string: path);

I think this should be:

path = ereg_replace(pattern: string("(java.io.FileNotFoundException:
)(.*)(",errorjsp,")(\(No such file or directory\))"), replace:"\2", string:
location);

But I don't have any way to test it.

Is the author still here?

Paul
-- 
Paul Johnston
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paulat_private
web: www.westpoint.ltd.uk

    This archive was generated by hypermail 2b30 : Mon Feb 17 2003 - 06:22:59 PST