[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: FW: Apache httpd: vulnerability with chunked encoding

To: Ben Goren <ben@trumpetpower.com>
Subject: Re: FW: Apache httpd: vulnerability with chunked encoding
From: Greg Steuck <greg-openbsd-misc@nest.cx>
Date: 17 Jun 2002 14:08:01 -0700
Cc: misc@openbsd.org
References: <B9338BA8.3D08%lists@rawten.net> <Pine.LNX.4.33.0206172117140.23854-100000@ace> <20020617131439.J17733@trumpetpower.com>
User-Agent: Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.4 (Honest Recruiter)

>>>>> "Ben" == Ben Goren <ben@trumpetpower.com> writes:

    Ben> On Mon, Jun 17, 2002 at 09:18:52PM +0200, Dries Schellekens
    Ben> wrote:
    >> This was fixed in -current by henning 2 hours ago

    Ben> Will it be backported to -stable?

Something like this will help until backport happens:

cd /usr/src/usr.sbin/httpd/src/main
ftp -o - 'http://www.openbsd.org/cgi-bin/cvsweb/src/usr.sbin/httpd/src/main/http_protocol.c.diff?r1=1.10&r2=1.12' | patch

References:
- FW: Apache httpd: vulnerability with chunked encoding
  - From: Rawten List Access <lists@rawten.net>
- Re: FW: Apache httpd: vulnerability with chunked encoding
  - From: Dries Schellekens <gwyllion@ace.ulyssis.org>
- Re: FW: Apache httpd: vulnerability with chunked encoding
  - From: Ben Goren <ben@trumpetpower.com>

Prev by Date: Re: FW: Apache httpd: vulnerability with chunked encoding
Next by Date: Re: pppd
Prev by thread: Re: FW: Apache httpd: vulnerability with chunked encoding
Next by thread: Re: FW: Apache httpd: vulnerability with chunked encoding
Index(es):
- Date
- Thread