oss-security - HAVP 0.89 fixes a crash

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Thu, 14 Aug 2008 17:01:55 +0200
From: Raphael Marichez <falco@...too.org>
To: oss-security@...ts.openwall.com
Subject: HAVP 0.89 fixes a crash


Hi,

havp (http://www.server-side.de/) seems to fix a DoS:

03.08.2008
HAVP 0.89 released
- Fix possible retry loop and hang (thanks to Peter Warasin @ endian.it)
- Always send Via: header, fixes some IIS problems (e.g. MSNBC)

Original report:

https://sourceforge.net/mailarchive/message.php?msg_name=487CDF51.5060201%40endian.com


-- 
Raphael Marichez aka Falco
Gentoo Linux Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.