3 ms·
Following up on this, I was unable to get it to do anything. curl --show-error --get --request GET --user freeswitch:works "http://localhost:8080/${SIXTEEN
by dqv 2y ago
Following up on this, I was unable to get it to do anything.
curl --show-error --get --request GET --user freeswitch:works "http://localhost:8080/${SIXTEEN_THOUSAND_RANDOM_CHARACTERS}"
Any ideas on triggering it? I imagine if we get a PoC that at least causes a segfault or whatever, they will be more likely to do a security release.
- dangerboysteve 2y agoI maybe wrong, but I think you need to enable the module for API access.
- dqv 2y agoYeah, it's enabled with `load mod_xml_rpc`. Listening on 8080. $ ./test3 # see above <HTML><HEAD><TITLE>Error 408</TITLE></HEAD><BODY><H1>Error 408</H1><P>Problem getting the request header</P><p><HR><b><i><a href="http://xmlrpc-c.sourceforge.net">ABYSS Web Server for XML-RPC For C/C++</a></i></b> version 1.26.0<br></p></BODY></HTML> hmmm