curl-library
Malformed URLs using curl
From: Guenther Boelter <gboelter_at_gbsconsult.net>
Date: Wed, 21 Jan 2009 22:12:32 +0800
Date: Wed, 21 Jan 2009 22:12:32 +0800
Hello!
In esniper ( http://esniper.sourceforge.net/ ) many times already I had a problem with malfomed URLs like this: Cannot connect to URL hPW>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Cannot connect to URL p.V>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Cannot connect to URL zXV>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Cannot connect to URL ^X}.<------>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Cannot connect to URL H..>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Cannot connect to URL ؔ.<>s://signin.ebay.com/ws/eBayISAPI.dll?SignIn Is it possiple, that the old libcurl URL Buffer Overflow is back in curl, like it was reported here: http://curl.haxx.se/docs/adv_20051207.html Fedora 9 - 2.6.27.9-73.fc9.i686 [root@localhost ~]# curl -V curl 7.18.2 (i386-redhat-linux-gnu) libcurl/7.18.2 NSS/3.12.2.0 zlib/1.2.3 libidn/0.6.14 libssh2/0.18 Protocols: tftp ftp telnet dict ldap ldaps http file https ftps scp sftp Features: GSS-Negotiate IDN IPv6 Largefile SSL libz libcurl-7.18.2-7.fc9.i386 libcurl-devel-7.18.2-7.fc9.i386 curl-7.18.2-7.fc9.i386 esniper-2-19-0.tgz Sorry, I am very new here and it's possible, that this problem is already known. Regards GuentherReceived on 2009-01-21