Hi,

the curl executable stalls on trying to read form data from a directory
instead of a file.

How to reproduce:

curl --insecure --form 'REQUEST=</etc'
https://www.commerzbank.com/cgi-bin/example.pl

Version:

curl 7.17.0 (sparc-sun-solaris2.10) libcurl/7.17.0 OpenSSL/0.9.7d
zlib/1.2.3 Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz

Problem:

curl should abort with an error message instead of stalling.

Workaround:

Do not try to read form data from a directory instead of a file.

Severity:

low

Cheers,

Ulrich Döhner

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-01-17