You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by bu...@apache.org on 2003/12/21 00:37:57 UTC
DO NOT REPLY [Bug 25649] -
DOS attack by making DispatchAction recurse on execute()
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649
DOS attack by making DispatchAction recurse on execute()
husted@apache.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Keywords| |PatchAvailable
Priority|Other |High
Target Milestone|--- |1.2 Family
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org
Re: DO NOT REPLY [Bug 25649] - DOS attack by making DispatchAction
recurse on execute()
Posted by Ted Husted <hu...@apache.org>.
No a patch per se, but there is a "structural solution" that we could try.
The ones I marked LATER were just reports with no suggestions as to a fix.
-T.
James Mitchell wrote:
> I must be missing something. I don't see a patch.
>
>
> --
> James Mitchell
> Software Engineer / Struts Evangelist
> http://www.struts-atlanta.org
> 678.910.8017
> 770.822.3359
> AIM:jmitchtx
>
>
>
> ----- Original Message -----
> From: <bu...@apache.org>
> To: <st...@jakarta.apache.org>
> Sent: Saturday, December 20, 2003 6:37 PM
> Subject: DO NOT REPLY [Bug 25649] - DOS attack by making DispatchAction
> recurse on execute()
>
>
>
>>DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
>>RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
>><http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649>.
>>ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
>>INSERTED IN THE BUG DATABASE.
>>
>>http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649
>>
>>DOS attack by making DispatchAction recurse on execute()
>>
>>husted@apache.org changed:
>>
>> What |Removed |Added
>>--------------------------------------------------------------------------
>
> --
>
>> Keywords| |PatchAvailable
>> Priority|Other |High
>> Target Milestone|--- |1.2 Family
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
>>For additional commands, e-mail: struts-dev-help@jakarta.apache.org
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-dev-help@jakarta.apache.org
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org
Re: DO NOT REPLY [Bug 25649] - DOS attack by making DispatchAction recurse on execute()
Posted by James Mitchell <jm...@apache.org>.
I must be missing something. I don't see a patch.
--
James Mitchell
Software Engineer / Struts Evangelist
http://www.struts-atlanta.org
678.910.8017
770.822.3359
AIM:jmitchtx
----- Original Message -----
From: <bu...@apache.org>
To: <st...@jakarta.apache.org>
Sent: Saturday, December 20, 2003 6:37 PM
Subject: DO NOT REPLY [Bug 25649] - DOS attack by making DispatchAction
recurse on execute()
> DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
> RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
> <http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649>.
> ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
> INSERTED IN THE BUG DATABASE.
>
> http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25649
>
> DOS attack by making DispatchAction recurse on execute()
>
> husted@apache.org changed:
>
> What |Removed |Added
> --------------------------------------------------------------------------
--
> Keywords| |PatchAvailable
> Priority|Other |High
> Target Milestone|--- |1.2 Family
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: struts-dev-help@jakarta.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: struts-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: struts-dev-help@jakarta.apache.org