[Bug 803720] Re: nginx packages in hardy/hardy-backports allow null-byte vulnerability in certain configurations

[Neal Poole]

Ran the following commands for the hardy-backports code:

./configure --prefix=/home/nbpoole/nginx/nginx-dev
make
make install
sudo ./sbin/nginx -c ~/nginx/nginx-dev/conf/nginx.conf

Server started up just fine. I tested it very briefly: it served up the
requests (and returned a 400 error when the URL contained a null byte).

-- 
You received this bug notification because you are a member of Ubuntu
Backporters, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/803720

Title:
  nginx packages in hardy/hardy-backports allow null-byte vulnerability
  in certain configurations

To manage notifications about this bug go to:
https://bugs.launchpad.net/hardy-backports/+bug/803720/+subscriptions