Comments on: CVE-2010-0010: Apache mod_proxy vulnerability http://blog.pi3.com.pl/?p=69 bughunt exploiting Tue, 17 Aug 2010 10:27:33 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: admin http://blog.pi3.com.pl/?p=69&cpage=1#comment-412 admin Fri, 05 Feb 2010 13:16:09 +0000 http://blog.pi3.com.pl/?p=69#comment-412 Hi Marc! This bug exists only on 64 bits architecture and this is reason why you can't reproduce it on 32 bits CentOS 5.4 Hi Marc!

This bug exists only on 64 bits architecture and this is reason why you can’t reproduce it on 32 bits CentOS 5.4

]]> By: Marc http://blog.pi3.com.pl/?p=69&cpage=1#comment-411 Marc Fri, 05 Feb 2010 12:18:36 +0000 http://blog.pi3.com.pl/?p=69#comment-411 Have you confirmed this in 32bit systems? I tried to reproduce this in 32bit CentOS 5.4 and it was impossible. Have you confirmed this in 32bit systems? I tried to reproduce this in 32bit CentOS 5.4 and it was impossible.

]]> By: Marc http://blog.pi3.com.pl/?p=69&cpage=1#comment-410 Marc Fri, 05 Feb 2010 12:17:48 +0000 http://blog.pi3.com.pl/?p=69#comment-410 Does it exist in 32bit systems? I tried to reproduce this in 32bit CentOS 5.4 and it was impossible. Any ideas? Does it exist in 32bit systems? I tried to reproduce this in 32bit CentOS 5.4 and it was impossible. Any ideas?

]]> By: admin http://blog.pi3.com.pl/?p=69&cpage=1#comment-380 admin Fri, 29 Jan 2010 14:45:43 +0000 http://blog.pi3.com.pl/?p=69#comment-380 Thanks - but this PoC is stupid, but shows that bug really exist :) Thanks – but this PoC is stupid, but shows that bug really exist :)

]]> By: 0xc http://blog.pi3.com.pl/?p=69&cpage=1#comment-379 0xc Fri, 29 Jan 2010 13:02:50 +0000 http://blog.pi3.com.pl/?p=69#comment-379 Very nice PoC for Integer Overflow. ;] Very nice PoC for Integer Overflow. ;]

]]> By: Apache mod_proxy “ap_proxy_send_fb()” Integer Truncation Vulnerability « Bug-Blog http://blog.pi3.com.pl/?p=69&cpage=1#comment-375 Apache mod_proxy “ap_proxy_send_fb()” Integer Truncation Vulnerability « Bug-Blog Fri, 29 Jan 2010 02:04:06 +0000 http://blog.pi3.com.pl/?p=69#comment-375 [...] Adam Zabrocki: http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.html http://site.pi3.com.pl/adv/mod_proxy.txt http://blog.pi3.com.pl/?p=69 [...] [...] Adam Zabrocki: http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.html http://site.pi3.com.pl/adv/mod_proxy.txt http://blog.pi3.com.pl/?p=69 [...]

]]>