Re: Fwd: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-13 Thread Christopher Faylor
On Mon, Dec 13, 2010 at 01:23:08PM +0100, Thorsten Kampe wrote: >* Christopher Faylor (Sun, 12 Dec 2010 14:59:51 -0500) >> However, since you are reporting 1) a nonissue and 2) a known issue >> [...] > >Best of 2010. ...and it just keeps going... Amazing. cgf -- Problem reports: http://cy

Re: Fwd: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-13 Thread Thorsten Kampe
* Christopher Faylor (Sun, 12 Dec 2010 14:59:51 -0500) > However, since you are reporting 1) a nonissue and 2) a known issue > [...] Best of 2010. Thorsten -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwi

Re: Fwd: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-13 Thread Csaba Raduly
>>> Since this is a regex search, the search term would be \[\.exe Oddly, that doesn't work. "Invalid regular expression search string: \[\.exe" But searching for \[.exe does. -- GCS a+ e++ d- C++ ULS$ L+$ !E- W++ P+++$ w++$ tv+ b++ DI D++ 5++ Life is complex, with real and imaginary parts. "O

Re: Fwd: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Christopher Faylor
On Sun, Dec 12, 2010 at 12:26:54PM -0500, Jeffrey Walton wrote: >On Sun, Dec 12, 2010 at 12:15 PM, Christopher Faylor wrote: >> On Sun, Dec 12, 2010 at 11:53:28AM -0500, Jeffrey Walton wrote: >>>2nd try. >> >> The input is sanitized. >Hmm > >> It is not a database and it is not PHP. >My bad CGI

Re: Fwd: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Jeffrey Walton
On Sun, Dec 12, 2010 at 12:15 PM, Christopher Faylor wrote: > On Sun, Dec 12, 2010 at 11:53:28AM -0500, Jeffrey Walton wrote: >>2nd try. > > The input is sanitized. Hmm > It is not a database and it is not PHP. My bad CGI then... > > The "Internal Server Error" just means that the search too

Re: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Jeffrey Walton
An email to sourcemas...@sourceware.org bounced. Can anyone bring this to the attention of the webmaster? == Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request. Please contact the server administr

Re: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Jeffrey Walton
"[1 = 1]" gets an Internal Server error. The PHP is probably trying to cough up everything On Sun, Dec 12, 2010 at 11:44 AM, Jeffrey Walton wrote: > BTW, Since the web interface tried to interpret my input ("Invalid > regular expression search string"), this database is probably > vulnerable

Re: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Jeffrey Walton
BTW, Since the web interface tried to interpret my input ("Invalid regular expression search string"), this database is probably vulnerable to a SQL injection. GNU just got pwn'd Has anyone tried thew 1 =1 trick lately? Are passwords residing in another table? Jeff Am 12.12.2010 12:29, schrieb

Re: Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Matthias Andree
Am 12.12.2010 12:29, schrieb Jeffrey Walton: > Hi Guys, > > The executable name is suspicious at best. Attempting to search On the contrary, it's a standard utility mentioned in IEEE Std 1003.1. > http://cygwin.com/packages/ results in an error "Invalid regular > expression search string: `[.exe

Suspicious EXE named "[.exe" in c:\cygwin\bin?

2010-12-12 Thread Jeffrey Walton
Hi Guys, The executable name is suspicious at best. Attempting to search http://cygwin.com/packages/ results in an error "Invalid regular expression search string: `[.exe`". Quotes, double quotes, and back ticks do not help during the search. What is this program supposed to do? Jeff -- Problem

Re: Suspicious EXE named .exe in c:\cygwin\bin?

2010-12-12 Thread Andy Koppe
On 12 December 2010 05:01, Jeffrey Walton wrote: > The executable name is suspicious at best. Attempting to search > http://cygwin.com/packages/ results in an error "Invalid regular > expression search string: `.exe`". Quotes, double quotes, and > back > ticks do not help during the search. > > Wh

Suspicious EXE named .exe in c:\cygwin\bin?

2010-12-11 Thread Jeffrey Walton
Hi Guys, The executable name is suspicious at best. Attempting to search http://cygwin.com/packages/ results in an error "Invalid regular expression search string: `.exe`". Quotes, double quotes, and back ticks do not help during the search. What is this program supposed to do? Jeff -- Problem