]> git.ipfire.org Git - thirdparty/squid.git/commit
projects / thirdparty / squid.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5bede33) | patch
FTP: Ignore credentials with a NUL-prefixed username (#1557)
authorAndreas Weigel <andreas.weigel@securepoint.de>
Tue, 14 Nov 2023 15:17:09 +0000 (15:17 +0000)
committerSquid Anubis <squid-anubis@squid-cache.org>
Tue, 14 Nov 2023 15:17:15 +0000 (15:17 +0000)
commit3728709bf085e1d94253fb5953c023d14941c243
treef9ffa3c3d726c480506d3fb6002e5b8776536765tree
parent5bede3305cabb9ac19babecf3ebaf64f43f7b53ecommit | diff
FTP: Ignore credentials with a NUL-prefixed username (#1557)

    FATAL: FTP login parsing destroyed username info

This bug was discovered and detailed by Joshua Rogers at
https://megamansec.github.io/Squid-Security-Audit/ftp-fatal.html
where it was filed as "FTP Authentication Crash".
src/clients/FtpGateway.cc diff | blob | blame | history
Mirror of https://github.com/squid-cache/squid.git