Created the page for the GUI program qweborf.
It also contains two screenshots.
Version 0.13 was just released.
Amongst the most important changes:
- Support for mimetype
- Can support large files
- Can be used with inetd/xinetd
- Ships qweborf: QT GUI for simple file sharing
- Can send directories as tar.gz files
- Directory listing and dav's PROPFIND can be cached on disk
- Migrated to GNU autotools
Developement version of weborf now uses GNU autotools.
The svn version does not contain the configure script, which will need to be generated using:
autoreconf -f -i
After this command, normally execute
./configure make make install
The releases .tar.gz will not need this procedure since they will contain the configure script.
Bugfix version 0.12.5 has been released.
This fixes a DoS vulnerability caused due to an error when handling certain HTTP fields. This could be exploited to terminate an affected server via e.g. specially crafted HTTP headers containing wide characters.
Upgrade is strongly advised.
Thanks to ipax of DcLabs Security Group for finding and reporting the issue.
Just released weborf 0.12.4, it fixes a DoS that occurred with invalid requests.
echo -ne 'GET\t/\tHTTP/1.0\r\n\r\n' | ncat localhost 80
Kudos to Michel Arboi for reporting this.