Skip Menu |
 

This queue is for tickets about the Embperl CPAN distribution.

Report information
The Basics
Id: 91909
Status: new
Priority: 0/
Queue: Embperl

People
Owner: Nobody in particular
Requestors: wireghoul [...] gmail.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Fwd: Embperl security bug
Date: Tue, 7 Jan 2014 11:17:24 +1100
To: bug-Embperl [...] rt.cpan.org
From: Wire Ghoul <wireghoul [...] gmail.com>
Download (untitled) / with headers
text/plain 699b
Hello there, I hope this is the right address for reporting this. I already reported it to debian, but it does not appear to have made it upstream to their perl maintainers list so I thought I would try a direct approach. The embperl package reveals the full path of the webroot when displaying a 404 message. The offending code appears to be defined at: Embperl-2.4.0/epmain.c:137: case rcNotFound: msg ="[%d]ERR: %d: %s Not found '%s', searched: %s" ; break ; Although there may be other instances as well. The full details can be found through the original Debian bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=731996 Cheers, Eldar "Wireghoul" Marcussen


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.