github
/
fail2ban
mirror of https://github.com/fail2ban/fail2ban
1
0
Fork 0
Code Issues Releases Wiki Activity

added patch changeset_ac061155f093464fb6cd2329d3d513b15c68e256.diff to "cherry-pick" ac061155f0 (BF: anchor introduced nginx-http-auth at the end)

pull/808/head
Yaroslav Halchenko 2013-11-08 17:30:35 -08:00
parent 521f8062bc
commit 93f30fe4f6
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
debian/patches/changeset_ac061155f093464fb6cd2329d3d513b15c68e256.diff vendored Normal file
View File

@ -0,0 +1,17 @@
From: Yaroslav Halchenko <debian@onerussian.com>
Subject: BF: anchor introduced nginx-http-auth at the end
needed since request probably could be not a correct HTTP statement but
continue with all those to match till the end and then injected ", client:
VICTIM, server..." thus allowing injection. We better anchor at the end then
--- a/config/filter.d/nginx-http-auth.conf
+++ b/config/filter.d/nginx-http-auth.conf
@@ -4,7 +4,7 @@
[Definition]
-failregex = ^ \[error\] \d+#\d+: \*\d+ user "\S+":? (password mismatch|was not found in ".*"), client: <HOST>, server: \S+, request: "\S+ \S+ HTTP/\d+\.\d+", host: "\S+"
+failregex = ^ \[error\] \d+#\d+: \*\d+ user "\S+":? (password mismatch|was not found in ".*"), client: <HOST>, server: \S+, request: "\S+ \S+ HTTP/\d+\.\d+", host: "\S+"\s*$
ignoreregex =

1
debian/patches/series vendored
View File

@ -1 +1,2 @@
deb_manpages_reportbug
changeset_ac061155f093464fb6cd2329d3d513b15c68e256.diff