FYI Lighttpd 1.4.23 /kernel (trailing '/' on regular file symlink) vulnerability

Dag-Erling Smørgrav des at des.no
Tue May 26 20:40:35 UTC 2009


Dag-Erling Smørgrav <des at des.no> writes:
> The attached patch should work.

Oops.  It actually triggers a KASSERT.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-hackers mailing list