[1009] in bugtraq

home help back first fref pref prev next nref lref last post

firewall HTTPD

daemon@ATHENA.MIT.EDU (*Hobbit*)
Wed Feb 15 19:54:29 1995

Date: Wed, 15 Feb 1995 18:37:14 -0500
From: *Hobbit* <hobbit@bronze.lcs.mit.edu>
To: bugtraq@fc.net
Reply-To: hobbit@bronze.lcs.mit.edu

I've looked this over carefully, and can't find any instances of setuid(),
gets(), popen(), strcat(), exec() or the like that look questionable to me.
But you should read all 2.5 Mb of the code yourself just to make sure!

Smileys are for wimps...

_H*

==============================
#include <stdio.h>

main () {
  char buf[80];
  fgets (buf, 77, stdin);
  printf ("\
<h1>	Acme Widgets Corporate Headquarters </h1>\r\n\
\r\n\
     Sorry, no Web server here.  Try \
<a href=ftp://ftp.acmewidgets.com>anonymous FTP.</a>\r\n\
");
  fflush (stdout);
  sleep (1);		/* so the net finishes flushing */
  exit (0);
}

home help back first fref pref prev next nref lref last post