HC's Capture the Flag website
CTF Contests
25C3-CTF

25C3-CTF final results

Advisory #32

From team Stealth Assassin

New advisory by : lamer
Affected service(s): vdspi
Severity [lmh] : low

===== Problem =====
vdspi does search for name only checks __lengths__, not contents
===== Impact =====
search all db records
===== Fix =====
don't know enough ADA to fix

Rating

[0] missing fix. you don't have to provide source code, the right concept is sufficient.

Go back


Impressum