Re: 11226 - Oracle 9iAS default error information disclosure

From: Paul Johnston (paulat_private)
Date: Mon Feb 17 2003 - 06:39:06 PST

  • Next message: Javier Fernandez-Sanguino: "Re: 11226 - Oracle 9iAS default error information disclosure"

    >     Yep. Still here. 
    Cool... thanks for the work on these, it's nice to cover a common 
    package like Oracle more thoroughly.
    >> path = ereg_replace(pattern: string("(
    >> )(.*)(",errorjsp,")(\(No such file or directory\))"), replace:"\2", 
    >> string:
    >> location);
    > I believe you have just changed path to location. Am I right? 
    Well, the crucial change is that I'm saving the return of ereg_replace 
    back into path. This function doesn't change the string in-place; it 
    returns the changed string. I think that's why you couldn't get it to work.
    Paul Johnston
    Internet Security Specialist
    Westpoint Limited
    Albion Wharf, 19 Albion Street,
    Manchester, M1 5LN
    Tel: +44 (0)161 237 1028
    Fax: +44 (0)161 237 1031
    email: paulat_private

    This archive was generated by hypermail 2b30 : Mon Feb 17 2003 - 06:37:50 PST