web security question.

P

pxlpluker

I have a friend that was using formmail.pl until last weekend when it
was hacked by spammers with a buffer overflow attack on one of the form
fields. I don't know enough about perl to know how/where the overflow
happened. I do have a raw copy of the data the spammer was using, he was
putting about 40k into a form field to break the script. I am guessing
it broke the script on the regex checking for valid emails or before.
My question is, is python open to such attacks and how to prevent it.
I am working on a web program that will have a email address and will
send an email/s.
would a buffer overflow attack work against python cgi ?

fred
 
P

Paul Rubin

pxlpluker said:
I have a friend that was using formmail.pl until last weekend when it
was hacked by spammers with a buffer overflow attack on one of the
form fields.

What makes you think it was a buffer overflow bug? formmail.pl is
notorious for having security bugs, but none have been buffer
overflows as far as I know. Are you sure it wasn't some other kind of bug?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,769
Messages
2,569,579
Members
45,053
Latest member
BrodieSola

Latest Threads

Top