Return-Path: Delivered-To: apmail-httpd-bugs-archive@www.apache.org Received: (qmail 19049 invoked from network); 2 Feb 2011 21:52:42 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 2 Feb 2011 21:52:42 -0000 Received: (qmail 57705 invoked by uid 500); 2 Feb 2011 21:52:41 -0000 Delivered-To: apmail-httpd-bugs-archive@httpd.apache.org Received: (qmail 57664 invoked by uid 500); 2 Feb 2011 21:52:41 -0000 Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: Reply-To: "Apache HTTPD Bugs Notification List" List-Id: Delivered-To: mailing list bugs@httpd.apache.org Received: (qmail 57653 invoked by uid 99); 2 Feb 2011 21:52:41 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Feb 2011 21:52:41 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=5.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.22] (HELO thor.apache.org) (140.211.11.22) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Feb 2011 21:52:39 +0000 Received: from thor.apache.org (localhost [127.0.0.1]) by thor.apache.org (8.13.8+Sun/8.13.8) with ESMTP id p12LqHFN020533 for ; Wed, 2 Feb 2011 21:52:17 GMT Received: (from daemon@localhost) by thor.apache.org (8.13.8+Sun/8.13.8/Submit) id p12LqHNK020532; Wed, 2 Feb 2011 16:52:17 -0500 (EST) Date: Wed, 2 Feb 2011 16:52:17 -0500 (EST) Message-Id: <201102022152.p12LqHNK020532@thor.apache.org> From: bugzilla@apache.org To: bugs@httpd.apache.org Subject: DO NOT REPLY [Bug 50711] QUERY_STRING vulnerability possible remote code execution X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Apache httpd-2 X-Bugzilla-Component: mod_include X-Bugzilla-Keywords: X-Bugzilla-Severity: trivial X-Bugzilla-Who: wrowe@apache.org X-Bugzilla-Status: RESOLVED X-Bugzilla-Priority: P2 X-Bugzilla-Assigned-To: bugs@httpd.apache.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Changed-Fields: Status Resolution In-Reply-To: References: X-Bugzilla-URL: https://issues.apache.org/bugzilla/ Auto-Submitted: auto-generated Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org https://issues.apache.org/bugzilla/show_bug.cgi?id=50711 William A. Rowe Jr. changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #1 from William A. Rowe Jr. 2011-02-02 16:52:15 EST --- This is well known. Do you have an example of a script the ASF distributes which is foolish enough to do this? -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org For additional commands, e-mail: bugs-help@httpd.apache.org