[BACK]Return to phf.c CVS log [TXT] [DIR] Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / thttpd / cgi-src

Annotation of embedaddon/thttpd/cgi-src/phf.c, revision 1.1.1.1

1.1       misho       1: /* phf - cracker trap
                      2: **
                      3: ** Old distributions of the NCSA and Apache web servers included a
                      4: ** version of the phf program that had a bug.  The program could
                      5: ** easily be made to run arbitrary shell commands.  There is no real
                      6: ** legitimate use for phf, so any attempts to run it must be considered
                      7: ** to be attacks.  Accordingly, this version of phf logs the attack
                      8: ** and then returns a page indicating that phf doesn't exist.
                      9: **
                     10: **
                     11: ** Copyright © 1996 by Jef Poskanzer <jef@mail.acme.com>.
                     12: ** All rights reserved.
                     13: **
                     14: ** Redistribution and use in source and binary forms, with or without
                     15: ** modification, are permitted provided that the following conditions
                     16: ** are met:
                     17: ** 1. Redistributions of source code must retain the above copyright
                     18: **    notice, this list of conditions and the following disclaimer.
                     19: ** 2. Redistributions in binary form must reproduce the above copyright
                     20: **    notice, this list of conditions and the following disclaimer in the
                     21: **    documentation and/or other materials provided with the distribution.
                     22: **
                     23: ** THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
                     24: ** ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
                     25: ** IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
                     26: ** ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
                     27: ** FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
                     28: ** DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
                     29: ** OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
                     30: ** HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
                     31: ** LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
                     32: ** OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
                     33: ** SUCH DAMAGE.
                     34: */
                     35: 
                     36: #include <stdio.h>
                     37: #include <stdlib.h>
                     38: #include <string.h>
                     39: #include <syslog.h>
                     40: 
                     41: #include "config.h"
                     42: 
                     43: static char* argv0;
                     44: 
                     45: int
                     46: main( int argc, char* argv[] )
                     47:     {
                     48:     char* cp;
                     49: 
                     50:     argv0 = argv[0];
                     51:     cp = strrchr( argv0, '/' );
                     52:     if ( cp != (char*) 0 )
                     53:        ++cp;
                     54:     else
                     55:        cp = argv0;
                     56:     openlog( cp, LOG_NDELAY|LOG_PID, LOG_FACILITY );
                     57:     syslog( LOG_CRIT, "phf CGI probe from %s", getenv( "REMOTE_ADDR" ) );
                     58:     (void) printf( "\
                     59: Content-type: text/html\n\
                     60: Status: 404/html\n\
                     61: \n\
                     62: <HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD>\n\
                     63: <BODY><H2>404 Not Found</H2>\n\
                     64: The requested object does not exist on this server.\n\
                     65: The link you followed is either outdated, inaccurate,\n\
                     66: or the server has been instructed not to let you have it.\n\
                     67: </BODY></HTML>\n" );
                     68:     exit( 0 );
                     69:     }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>