cgi-bin vulnerability

does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf vulnerability? cheers, -paul

-----BEGIN PGP SIGNED MESSAGE----- On Fri, 29 Nov 1996 pjb@ny.ubs.com wrote:
does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf vulnerability?
cheers, -paul
If you can't figure out how, you probably don't need to know. (actually, its so simple the average high school student could probablyfigure it out, if they knew what %0A meant... oops.. wasn't supposed to tell you that... ;) --Deviant PGP KeyID = E820F015 Fingerprint = 3D6AAB628E3DFAA9 F7D35736ABC56D39 "All in all is all we are." -- Kurt Cobain -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMp8jSjCdEh3oIPAVAQFkoAf+Nu62ObHyWHgDvkWAqqH7QTw4svfkELTB d5E8S1ghkyxL1219LwGljelQ+uHaZt4EGB/nnDfQo7H2J9fMDR1CLJRC+h95xxKM mKuAVbVT1W3nPm4+WP5DIplMvF/xVmextdbGLmAfYQksXQ4uGNRuaawS9G2ffYLP erBEN9XuxvVY0AnTYCErnpDdOhh4BNTi2+os86Ea+mXt2FG3D8y0pdfRSnOJm2YU yvQ7pUrMfhl9DGauc+lvb42B8OXWElnjYIFloxWr+rxACzS6NCbGF3izjfTv+2HX tRZUuwYNee3j+p7kDY9ebANJqWUcMtR9To5za1/vlA4QAtPl5HsaVw== =3/ok -----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE----- On Fri, 29 Nov 1996 pjb@ny.ubs.com wrote:
does anyone have a pointer to any sample scripts for exploiting the cgi-bin/phf vulnerability?
Read 2600 this month. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Jeremey Barrett Senior Software Engineer jeremey@veriweb.com VeriWeb Internet Corp. http://www.veriweb.com/ PGP Key fingerprint = 3B 42 1E D4 4B 17 0D 80 DC 59 6F 59 04 C3 83 64 PGP Public Key: http://www.veriweb.com/people/jeremey/pgpkey.html "less is more." -- Mies van de Rohe. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMp9FUy/fy+vkqMxNAQEVNgP+N8iV50TXnDkLInlT4a6dsmrbqh5fHpcS OcgRWquV0vuZ/gl7SWN+nxpMPLeg1foHS3nfYu4D9OQJtumdbQXdgbiAk61hOli3 5YKsFbMF0xtfuWRZ8wLzL0R8Qa5jQGaQbIrS4IkH7mJyxsoMeUYPMWjklH7kf79Y oP+REy9dxUA= =ekPQ -----END PGP SIGNATURE-----
participants (3)
-
Jeremey Barrett
-
pjb@ny.ubs.com
-
The Deviant