RE: Nginx 0.8.35 Space Character Remote Source Disclosure
Looks like this affected Windows only, and was fixed a while ago.
Changes with nginx 0.7.65 01 Feb 2010
*) Security: now nginx/Windows ignores trailing spaces in URI.
Thanks to Dan Crowley, Core Security Technologies.
-----Original Message-----
From: abc12345@hushmail.com [mailto:abc12345@hushmail.com]
Sent: Monday, May 31, 2010 11:00 AM
To: bugtraq@securityfocus.com
Subject: Re: Nginx 0.8.35 Space Character Remote Source Disclosure
what about the stable branch? Versions 0.7.65 and earlier?
討論串 (同標題文章)
完整討論串 (本文為第 1 之 2 篇)：