>Number: 1030 >Category: general >Synopsis: Apache will crash if cgi-bins are called with parameters >without ='s >Confidential: no >Severity: serious >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Thu Aug 21 00:10:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.3a1 (WinNT >Environment: WinNT 4.0, Visual C++ 4.2 >Description: Apache will crash if cgi-bins are called with parameters without ='s >How-To-Repeat: Try something like http://localhost/cgi-bin/test?juttu >Fix: change line 659 from util_script.c as follows: ... else { if (is_exe || is_binary) { pid = spawnve(_P_NOWAIT, r->filename, create_argv(r->pool, argv0, NULL, NULL, r->args, (void *)NULL), env); ... to: else { if (is_exe || is_binary) { pid = spawnve(_P_NOWAIT, r->filename, create_argv(r->pool, NULL, NULL, NULL, argv0, r->args), env); .. >Audit-Trail: >Unformatted:
