Weborf

Created the page for the GUI program qweborf.
It also contains two screenshots.

~~DISCUSSION~~

Version 0.13 was just released.

Amongst the most important changes:
- Support for mimetype
- Can support large files
- Can be used with inetd/xinetd
- Ships qweborf: QT GUI for simple file sharing
- Can send directories as tar.gz files
- Directory listing and dav's PROPFIND can be cached on disk
- Migrated to GNU autotools

Download

Full changelog

Developement version of weborf now uses GNU autotools.
The svn version does not contain the configure script, which will need to be generated using:

autoreconf -f -i

After this command, normally execute

./configure
make
make install

The releases .tar.gz will not need this procedure since they will contain the configure script.

Bugfix version 0.12.5 has been released.

This fixes a DoS vulnerability caused due to an error when handling certain HTTP fields. This could be exploited to terminate an affected server via e.g. specially crafted HTTP headers containing wide characters.

Upgrade is strongly advised.
Download

Thanks to ipax of DcLabs Security Group for finding and reporting the issue.

~~DISCUSSION~~

Just released weborf 0.12.4, it fixes a DoS that occurred with invalid requests.

For example:

echo -ne 'GET\t/\tHTTP/1.0\r\n\r\n' | ncat localhost 80

Kudos to Michel Arboi for reporting this.

~~DISCUSSION~~