Re: Vulnerability in NCSA HTTPD 1.3

[martikka () tele nokia fi (Hannu Martikka)]

On Tue, 14 Feb 1995, Paul 'Shag' Walmsley wrote:

> As Thomas implied, this particular problem can probably be fixed by
> changing line 161 of util.c from
>
>       char tmp[MAX_STRING_LEN];
> to
>       char tmp[HUGE_STRING_LEN];
>
> in NCSA's source.  We're running with the HUGE_STRING_LEN tmp now with no 
> (immediately apparent) bad side-effects (other than Thomas' hack not working 
> any more ;)
There are other similar places. At least one in http_log.c (111).
At least you could overwrite that temp-variable easily, which caused core...

- Goodi