oss-security - request CVE for weborf

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <201101281125.22255.tiposchi@tiscali.it>
Date: Fri, 28 Jan 2011 11:25:21 +0100
From: Salvo Tomaselli <tiposchi@...cali.it>
To: oss-security@...ts.openwall.com
Subject: request CVE for weborf

Greetings,

i am requesting a CVE for weborf http://galileo.dmi.unict.it/wiki/weborf/

weborf 0.12.5 fixes a DoS occurring with malformed fields in HTTP request.

Diff from previous version 0.12.4:

$ diff 0.12.4/utils.c 0.12.5/utils.c 
270a271,272
>     val += param_len + 2; //Moves the begin of the string to exclude the 
name of the field
> 
276d277
<     val += param_len + 2; //Moves the begin of the string to exclude the 
name of the field

Regards
-- 
Salvo Tomaselli

Download attachment "signature.asc " of type "application/pgp-signature" (837 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.