Menu ▾ ▴

httpdx 1.4

Help
NET333
2010-04-23
2013-04-10

  • NET333

    NET333 - 2010-04-23

    I am opening this topic because I am trying to find an older version of this application ( httpdx 1.4 )… I am trying to find an older version because I am testing a format string vulnerability…

    I have days trying to find this software on internet (google, yahoo, altavista, live…) but I only found new versions such as 1.5, 1.5.4, 1.4.6b and others… In the author's website (  httpdx(dot)sourceforge(dot)net  ) I only found those versions:

    Httpdx 1.5.4
    Httpdx 1.5.3b
    Httpdx 1.5.3
    Httpdx 1.5.2
    Httpdx 1.5.1
    Httpdx 1.5

    In www(dot)brothersoft(dot)com I only found httpdx 1.4.6b…

    …thanks…

     

  • Anonymous

    Anonymous - 2010-04-23

    Unfortunately I don't own that old software, and it's not hosted here anymore due to its vulnerabilities.

    However, you can still test this vulnerability when you replace the fixed line 

    strncpy(temp[1],client->host,MAX);

    with the old one 

    snprintf(temp[1],MAX,client->host);

    in http.cpp (v. 1.5.4).

    There 's also version 1.5.2 that has similar format string vulnerability in its ftp -code.
    Hope this helps.

     

Log in to post a comment.