Remote Code Execution on Most Dell Computers

Re:Remote Code Execution on Most Dell Computers by taspeotis on Wednesday May 01, 2019 @05:40PM (#19801905)

The author exploited this by adding a space to the URL so it no longer started with http:// rather (space)http:// but it looks like the call to Replace would be ineffective if the URL started with HTTP:// as well.

    bool flag2 = file.Location.ToLower().StartsWith("http://");
    if (flag2)
    {
        file.Location = file.Location.Replace("http://", "https://");
    }

I trust the new version isn’t vulnerable to this...

[ Parent | on HN ]

Re:Remote Code Execution on Most Dell Computers by BillDemirkapi on Wednesday May 01, 2019 @06:41PM (#19802393)

There were a bunch of ways to bypass the check. For example another way would be to use "http:\\" which wouldn't get detected either. The new version isn't vulnerable.

[ Parent | on HN ]