[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Regular Expression Denial of Service

To: Alex Roichman <Alexr@xxxxxxxxxxxxx>
Subject: Re: Regular Expression Denial of Service
From: Pavel Kankovsky <peak@xxxxxxxxxxxxxxxxxxxxxx>
Date: Sun, 13 Sep 2009 21:35:09 +0200 (MET DST)

Oops. "PCRE" in my response should have read "Perl". PCRE implementation
is different from the implementation included in Perl--and rather
ironically it seems PCRE is vulnerable.

-- 
Pavel Kankovsky aka Peak                          / Jeremiah 9:21        \
"For death is come up into our MS Windows(tm)..." \ 21st century edition /

References:
- Regular Expression Denial of Service
  - From: Alex Roichman

Prev by Date: [ GLSA 200909-17 ] ZNC: Directory traversal
Next by Date: [SECURITY] [DSA 1883-2] New nagios2 packages fix regression
Previous by thread: Re: Regular Expression Denial of Service
Next by thread: Re: Regular Expression Denial of Service
Index(es):
- Date
- Thread