[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Nginx 0.8.35 Space Character Remote Source Disclosure

To: <abc12345@xxxxxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: RE: Nginx 0.8.35 Space Character Remote Source Disclosure
From: <reply-to-list@xxxxxxxxxxxxxx>
Date: Mon, 31 May 2010 20:02:05 -0400

Looks like this affected Windows only, and was fixed a while ago.

Changes with nginx 0.7.65                                        01 Feb 2010

    *) Security: now nginx/Windows ignores trailing spaces in URI.
       Thanks to Dan Crowley, Core Security Technologies. 

-----Original Message-----
From: abc12345@xxxxxxxxxxxx [mailto:abc12345@xxxxxxxxxxxx] 
Sent: Monday, May 31, 2010 11:00 AM
To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Nginx 0.8.35 Space Character Remote Source Disclosure

what about the stable branch? Versions 0.7.65 and earlier?

References:
- Re: Nginx 0.8.35 Space Character Remote Source Disclosure
  - From: abc12345

Prev by Date: Re: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera
Next by Date: Re: Nginx 0.8.35 Space Character Remote Source Disclosure
Previous by thread: Re: Nginx 0.8.35 Space Character Remote Source Disclosure
Next by thread: Re: Nginx 0.8.35 Space Character Remote Source Disclosure
Index(es):
- Date
- Thread