Attachment 5841 Details for Bug 15148 – using kolab-webadmin

using kolab-webadmin

webadmin.txt (text/plain), 2.78 KB, created by Thomas Spuhler on 2015-01-28 00:01:32 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Thomas Spuhler

Created: 2015-01-28 00:01:32 CET

Size: 2.78 KB

patch

obsolete

>Jan 26 16:16:14 vbox.btspuhler.com suhosin[8557]: ALERT - configured
>request variable name length limit exceeded - dropped variable
>'{"object_type":"user","type_id":1,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
>(attacker '127.0.0.1', file
>'/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:14 vbox.btspuhler.com suhosin[8557]: ALERT - dropped 1
>request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
>'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:18 vbox.btspuhler.com suhosin[8427]: ALERT - configured
>request variable name length limit exceeded - dropped variable
>'{"object_type":"group","type_id":2,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
>(attacker '127.0.0.1', file
>'/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:18 vbox.btspuhler.com suhosin[8427]: ALERT - dropped 1
>request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
>'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:29 vbox.btspuhler.com suhosin[8457]: ALERT - configured
>request variable name length limit exceeded - dropped variable
>'{"object_type":"user","type_id":1,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
>(attacker '127.0.0.1', file
>'/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:29 vbox.btspuhler.com suhosin[8457]: ALERT - dropped 1
>request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
>'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:30 vbox.btspuhler.com cyrus-master[1187]: process 11582
>exited, status 0
>Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - configured
>request variable array index length limit exceeded - dropped variable
>'{"alias":["root@vbox.btspuhler.com","spuhler@vbox.btspuhler.com","thomas@vbox.btspuhler.com","t.spuhler@vbox.btspuhler.com"]'
>(attacker '127.0.0.1', file
>'/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - dropped 1
>request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
>'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - configured
>request variable array index length limit exceeded - dropped variable
>'{"alias":["root@vbox.btspuhler.com","spuhler@vbox.btspuhler.com","thomas@vbox.btspuhler.com","t.spuhler@vbox.btspuhler.com"]'
>(attacker '127.0.0.1', file
>'/usr/share/kolab-webadmin/public_html/api/index.php')
>Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - dropped 1
>request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
>'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')

Jan 26 16:16:14 vbox.btspuhler.com suhosin[8557]: ALERT - configured
request variable name length limit exceeded - dropped variable
'{"object_type":"user","type_id":1,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
(attacker '127.0.0.1', file
'/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:14 vbox.btspuhler.com suhosin[8557]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:18 vbox.btspuhler.com suhosin[8427]: ALERT - configured
request variable name length limit exceeded - dropped variable
'{"object_type":"group","type_id":2,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
(attacker '127.0.0.1', file
'/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:18 vbox.btspuhler.com suhosin[8427]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:29 vbox.btspuhler.com suhosin[8457]: ALERT - configured
request variable name length limit exceeded - dropped variable
'{"object_type":"user","type_id":1,"effective_rights":{"attribute":{"objectclass":["read","search","compare","write","delete"]'
(attacker '127.0.0.1', file
'/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:29 vbox.btspuhler.com suhosin[8457]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:30 vbox.btspuhler.com cyrus-master[1187]: process 11582
exited, status 0
Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - configured
request variable array index length limit exceeded - dropped variable
'{"alias":["root@vbox.btspuhler.com","spuhler@vbox.btspuhler.com","thomas@vbox.btspuhler.com","t.spuhler@vbox.btspuhler.com"]'
(attacker '127.0.0.1', file
'/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - configured
request variable array index length limit exceeded - dropped variable
'{"alias":["root@vbox.btspuhler.com","spuhler@vbox.btspuhler.com","thomas@vbox.btspuhler.com","t.spuhler@vbox.btspuhler.com"]'
(attacker '127.0.0.1', file
'/usr/share/kolab-webadmin/public_html/api/index.php')
Jan 26 16:16:31 vbox.btspuhler.com suhosin[8432]: ALERT - dropped 1
request variables - (0 in GET, 1 in POST, 0 in COOKIE) (attacker
'127.0.0.1', file '/usr/share/kolab-webadmin/public_html/api/index.php')

Actions: View

Attachments on bug 15148: 5841 | 5842