hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : apache weirdness
Reply

Hosting Security and Technology Configuring and optimizing web hosting servers and operating systems, developing administration scripts, building servers, protecting against hackers, and general security (SSL certificates, etc.)
Forum Jump

apache weirdness

Reply Post New Thread In Hosting Security and Technology Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 12-15-2005, 03:12 PM
sasha sasha is offline
Hail Eris !
 
Join Date: Oct 2002
Location: Canada
Posts: 3,100

apache weirdness


One of my clients hosts his site with third party. Yesterday we added a new feature and stumbled across odd bug. I have no much access to that server, but it seems it is rather standard cpanel install there. Anyway, the bug, when you enter "nc " , that is letters nc and one space after (or line break) in any input field or textarea and submit such form (post or get) server generates Internal Error (500). No more info is available. This works the same on .php and on .html pages (but on cpanel servers php is often used for .html pages too). The problem is reported to host, but I wonder did anyone experience something like this before.

Reply With Quote


Sponsored Links
  #2  
Old 12-15-2005, 03:23 PM
sehe sehe is offline
Web Hosting Master
 
Join Date: Jun 2003
Posts: 962
could be a badly configured mod_security checking for "nc" in the post/get data
ask the host if they have mod_security running

Reply With Quote
  #3  
Old 12-15-2005, 03:34 PM
sasha sasha is offline
Hail Eris !
 
Join Date: Oct 2002
Location: Canada
Posts: 3,100
Ahh, very good point. I do not know why I did not think of it before. Anyway, I tried some other stuff that you would block with mod_security (wget , gcc, cc , nmap etc.) and sure enough, the same thing happens. Thanks


Last edited by sasha; 12-15-2005 at 03:38 PM.
Reply With Quote
Sponsored Links
  #4  
Old 12-15-2005, 09:46 PM
simplestar simplestar is offline
Junior Guru Wannabe
 
Join Date: Nov 2005
Posts: 76
Why would one need to input nc space? Yeah, I would say chances are high that your provider has a mod_sec rule for bcc, BCc, CC, cc, cC, etc.

Reply With Quote
  #5  
Old 12-15-2005, 10:02 PM
sasha sasha is offline
Hail Eris !
 
Join Date: Oct 2002
Location: Canada
Posts: 3,100
Quote:
Originally Posted by simplestar
Why would one need to input nc space? Yeah, I would say chances are high that your provider has a mod_sec rule for bcc, BCc, CC, cc, cC, etc.
This is why:
Quote:
Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Donec porttitor. Vivamus congue lacus at dui. Nunc hendrerit laoreet nisl.
I do not think we speak about the same cc, i talk about compiler and you talk about email.

Reply With Quote
  #6  
Old 12-15-2005, 10:17 PM
simplestar simplestar is offline
Junior Guru Wannabe
 
Join Date: Nov 2005
Posts: 76
Quote:
Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Donec porttitor. Vivamus congue lacus at dui. Nunc hendrerit laoreet nisl.
Oh, alright, I understand now. Yes, I was thinking of email as the only option for some reason.

Reply With Quote
  #7  
Old 12-16-2005, 03:16 AM
RackPoint-Morgan RackPoint-Morgan is offline
Can Haz Cheezeburger
 
Join Date: May 2005
Location: Bay Area
Posts: 1,162
Sashe Sehe and Simplestar. Any of you related? lol.

Reply With Quote
  #8  
Old 12-16-2005, 11:51 AM
sehe sehe is offline
Web Hosting Master
 
Join Date: Jun 2003
Posts: 962
Quote:
Sashe Sehe and Simplestar. Any of you related? lol.
lol, nope
Quote:
Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Donec porttitor. Vivamus congue lacus at dui. Nunc hendrerit laoreet nisl.
anyone care to translate?
Quote:
Why would one need to input nc space?
to "forbid" usage of netcat (nc)

Reply With Quote
  #9  
Old 12-16-2005, 12:38 PM
simplestar simplestar is offline
Junior Guru Wannabe
 
Join Date: Nov 2005
Posts: 76
Quote:
Sashe Sehe and Simplestar. Any of you related? lol.
lol


Quote:
Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Donec porttitor. Vivamus congue lacus at dui. Nunc hendrerit laoreet nisl.
Lorem Ipsum is a Latin based laguage and used to assist in the format and layout designs. Be it for books, website, etc.

Here's an interesting link http://www.lipsum.com/


Thanks Sehe

Reply With Quote
Reply

Related posts from TheWhir.com
Title Type Date Posted
Researchers Urge System Admins to Check for New Apache Web Server Backdoor Malware Web Hosting News 2013-05-01 11:35:53
Apache Web Server Adds Cloud Capabilities with First Major Update in 5 Years Web Hosting News 2012-02-21 16:05:02
The Apache Software Foundation Launches Hadoop v1.0 Web Hosting News 2012-01-05 18:29:16
Oracle is the Latest Vendor to Apply Patch for Apache Killer Flaw Web Hosting News 2011-09-19 14:43:58
Patch Released for Apache Software DDoS Vulnerability Web Hosting News 2011-08-26 15:03:10


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?