// COMPLETE THREAD

cgi-bin vulnerability

3 expanded posts · every known parent and child

NODE fbfa2cfdcgi-bin vulnerability pjb@ny.ubs.comFri, 29 Nov 1996 07:07:14 -0800 (PST)

does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf
vulnerability? 

cheers,
	-paul

NODE 19fe1586Re: cgi-bin vulnerability The Deviant <deviant@pooh-corner.com>Fri, 29 Nov 1996 09:55:54 -0800 (PST)

-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 29 Nov 1996 pjb@ny.ubs.com wrote:

> does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf
> vulnerability? 
> 
> cheers,
> 	-paul
> 

If you can't figure out how, you probably don't need to know. (actually,
its so simple the average high school student could probablyfigure it out,
if they knew what %0A meant... oops.. wasn't supposed to tell you that...
;)

 --Deviant
   PGP KeyID = E820F015 Fingerprint = 3D6AAB628E3DFAA9 F7D35736ABC56D39

"All in all is all we are."
		-- Kurt Cobain


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMp8jSjCdEh3oIPAVAQFkoAf+Nu62ObHyWHgDvkWAqqH7QTw4svfkELTB
d5E8S1ghkyxL1219LwGljelQ+uHaZt4EGB/nnDfQo7H2J9fMDR1CLJRC+h95xxKM
mKuAVbVT1W3nPm4+WP5DIplMvF/xVmextdbGLmAfYQksXQ4uGNRuaawS9G2ffYLP
erBEN9XuxvVY0AnTYCErnpDdOhh4BNTi2+os86Ea+mXt2FG3D8y0pdfRSnOJm2YU
yvQ7pUrMfhl9DGauc+lvb42B8OXWElnjYIFloxWr+rxACzS6NCbGF3izjfTv+2HX
tRZUuwYNee3j+p7kDY9ebANJqWUcMtR9To5za1/vlA4QAtPl5HsaVw==
=3/ok
-----END PGP SIGNATURE-----

NODE cad6deefRe: cgi-bin vulnerability Jeremey Barrett <jeremey@veriweb.com>Fri, 29 Nov 1996 12:18:29 -0800 (PST)

-----BEGIN PGP SIGNED MESSAGE-----

On Fri, 29 Nov 1996 pjb@ny.ubs.com wrote:

> does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf
> vulnerability? 
> 

Read 2600 this month.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Jeremey Barrett
Senior Software Engineer                         jeremey@veriweb.com
VeriWeb Internet Corp.                           http://www.veriweb.com/

PGP Key fingerprint =  3B 42 1E D4 4B 17 0D 80  DC 59 6F 59 04 C3 83 64
PGP Public Key: http://www.veriweb.com/people/jeremey/pgpkey.html
                
		"less is more."  -- Mies van de Rohe.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMp9FUy/fy+vkqMxNAQEVNgP+N8iV50TXnDkLInlT4a6dsmrbqh5fHpcS
OcgRWquV0vuZ/gl7SWN+nxpMPLeg1foHS3nfYu4D9OQJtumdbQXdgbiAk61hOli3
5YKsFbMF0xtfuWRZ8wLzL0R8Qa5jQGaQbIrS4IkH7mJyxsoMeUYPMWjklH7kf79Y
oP+REy9dxUA=
=ekPQ
-----END PGP SIGNATURE-----