CVS log for src/usr.bin/openssl/s_server.c

Up to [local] / src / usr.bin / openssl

Request diff between arbitrary revisions

Default branch: MAIN
Current tag: OPENBSD_6_6

Revision 1.32 / (download) - annotate - [select for diffs], Fri Oct 4 09:47:34 2019 UTC (4 years, 8 months ago) by bcook
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.31: +3 -3 lines
Diff to previous 1.31 (colored)

Avoid a path traversal bug in s_server on Windows.

openssl s_server has an arbitrary read vulnerability on Windows when run with
the -WWW or -HTTP options, due to an incomplete path check logic. Thanks to
Jobert Abma for reporting.

ok tb@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.