CVE-2009-1476

CVE-2009-1476 affects Darren Reed IPFilter (IPFilter) 4.1.31. The issue is a buffer overflow in lib/load_http.c (local buffer 1024 bytes) used when building an HTTP request for IP pool management. The code copies the URL into a 1024-byte buffer and also builds the GET line with the URL, with a pa...

IPFilter lib/load_http.c文件缓冲区溢出漏洞

BUGTRAQ ID: 35076 CVECAN ID: CVE-2009-1476 IPFilter是一款免费的开放源代码的防火墙程序，由Darren Reed编写，可使用在多种Unix和Linux操作系统平台下。 Ippool用于管理IPFilter的IP池子系统中所储存的信息。在IPFilter的lib/loadhttp.c文件中（char buffer1024）： - --- ... alistt loadhttpchar url int fd, len, left, port, endhdr, removed; char s, t, u, buffer1024, myurl;...