lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <001601c23cd0$dbe6df00$e62d1c41@kc.rr.com> From: mattmurphy at kc.rr.com (Matthew Murphy) Subject: Unchecked Buffer in Jana Web Server Security Advisory: Unchecked Buffer in Jana Web Server Jana Web Server has been the focus of several recent discoveries, including several buffer overrun vulnerabilities. Yet another exploitable overflow exists in the Jana Web Server. Jana Web Server does not properly check the size of the HTTP request method input by the user before storing it, resulting in a stack overflow. If the method sufficiently exceeds the allocated storage, EIP will be overwritten. Example: [buffer] / HTTP/1.0 The buffer can't contain any of the following chars: 0x00 - duh 0x0D - CR 0x0A - LF (both end our request line) 0x20 - space; this terminates the method portion Exploitability is still in testing. "The reason the mainstream is thought of as a stream is because it is so shallow." - Author Unknown --------------------------------------------------------------------- This message (including any attachments) contains confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.
Powered by blists - more mailing lists