cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2104
Views
9
Helpful
8
Replies

Bug in Report_Rule parsing (SPA50x, fw 7.5.x)

Dan Lukes
VIP Alumni
VIP Alumni

Report_Rule defined as: https://$(A)/Cisco/Report.php?PSN=$PSN;Product=$PN;SW=$SW

has expanded to POST /Cisco/Report.php?PSN=508G;Product=SPA508G;SW=7.4.9 on 7.4.9 firmware

starting with 7.5.2b (verified on 7.5.3 also) it expand to request POST /Cisco/Report.php?PSN=508G only instead

SYSLOG message claim:

Facility local3 (19), Severity debug (7)

Msg: first_rule is https://test...(deleted)...cz/Cisco/Report.php?PSN=508G, second_rule is Product=SPA508G;SW=7.5.3.\0x0a

Unfortunately, it seems that programmer in charge has used ';' as some sort of internal delimiter, not properly sanitizing user input or, at least, describing the special meaning of ';' in documentation.

1 Accepted Solution

Accepted Solutions