Displaying 1 result from an estimated 1 matches for "table_set".
Did you mean:
table_get
1997 Jan 12
0
Apache 1.1.1 overflow
...(dot = strchr(rname,''.''))) *dot=''\0''; /* First bit of hostname */
gettimeofday(&tv, &tz);
sprintf(new_cookie,"%s%s%d%ld%d; path=/",
COOKIE_NAME, rname,
(int)getpid(),
(long)tv.tv_sec, (int)tv.tv_usec/1000 );
table_set(r->headers_out,"Set-Cookie",new_cookie);
return;
}
Note that although the get_remote_host() function converts all uppercase
letters to lowercase letters, there is at least one way in which a
determined attacker can still exploit the overflow.
Impact
~~~~~~
Remote individuals can...