Re: 11226 - Oracle 9iAS default error information disclosure

From: Paul Johnston (paulat_private)
Date: Mon Feb 17 2003 - 06:39:06 PST

  • Next message: Javier Fernandez-Sanguino: "Re: 11226 - Oracle 9iAS default error information disclosure" 

    Hi,

>     Yep. Still here. 

Cool... thanks for the work on these, it's nice to cover a common 
package like Oracle more thoroughly.

>> path = ereg_replace(pattern: string("(java.io.FileNotFoundException:
>> )(.*)(",errorjsp,")(\(No such file or directory\))"), replace:"\2", 
>> string:
>> location);
>
> I believe you have just changed path to location. Am I right? 

Well, the crucial change is that I'm saving the return of ereg_replace 
back into path. This function doesn't change the string in-place; it 
returns the changed string. I think that's why you couldn't get it to work.

Paul

-- 
Paul Johnston
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paulat_private
web: www.westpoint.ltd.uk

    This archive was generated by hypermail 2b30 : Mon Feb 17 2003 - 06:37:50 PST