IBM Lotus Domino Web Server "Accept Language" HTTP header vulnerability [Sitemap] - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

PDA

View Full Version : IBM Lotus Domino Web Server "Accept Language" HTTP header vulnerability


haluznik
25-05-08, 17:09
Did anybody analyse the "Accept-Language" HTTP header buffer overflow vulnerability in IBM Lotus Domino web server? This is important : " It should be noted that to access the code path containing the vulnerable function specially crafted characters must be included within the URL being requested. ( from Mwr infosecurity advisory )"

Dr.Retz
17-09-08, 09:13
Hi

I am testing it on version 8. Below is my special crafted characters in url request but it doesn't crash the sever.

print $sock "GET /helpÖØ§<>( HTTP/1.1\r\n";


Anything missing?