[AWS] Security pb
Dmitriy Anisimkov
anisimkov at ada-ru.org
Fri Jan 5 17:39:09 CET 2007
frett27 at free.fr wrote:
> Hi,
>
> i as understand the problem (i have'nt tried to reproduce it yet) is that when
> you send a long POST request to the aws imgsvr, that has more than 3000 bytes
> and is not a multi/form.
>
> as i have'nt reproduce it yet i don't known if it is caused by my dev or in the
> aws layer.
>
> can i assume that you have not ever eared about this kind of pb ?
>
I do not know AWS security holes for now. But it does not guarantee its
absence.
I see the soft testing the possible holes noted here
http://arachnids.stillsecure.com/SAT/scripts/OSSSA/GPL/released/OSSSA/scripts/os2a_imgsvr_dos_600941.nasl
I installed it, and do not see the problem you told about.
Maybe I miss something. Maybe I would inverstigate AWS with this soft
more, not sure.
If you interesting in the AWS security, you could help providing test code.
We would be much more active, if we would have AWS security broking example.
More information about the AWS
mailing list