Bug 12917

Summary:	test
Product:	ACPI	Reporter:	spiderkid (spiderkid)
Component:	Config-Hotplug	Assignee:	acpi_config-hotplug
Status:	REJECTED INVALID
Severity:	normal	CC:	devzero, warthog9
Priority:	P1
Hardware:	All
OS:	Linux
Kernel Version:	2.2.2	Subsystem:
Regression:	No	Bisected commit-id:
Attachments:	test asd

Description spiderkid 2009-03-22 01:13:03 UTC

Latest working kernel version:
Earliest failing kernel version:
Distribution:
Hardware Environment:
Software Environment:
Problem Description:

Steps to reproduce:

Comment 1 spiderkid 2009-03-22 01:13:52 UTC

Created attachment 20624 [details]
test

Comment 2 spiderkid 2009-03-22 01:33:46 UTC

Created attachment 20625 [details]
asd

Comment 3 ykzhao 2009-03-22 07:04:17 UTC

Hi, Spidekid
    It seems that this is an invalid bug. We don't know what you want to do.
    If it is a real bug, please give the correct description and attach the output of acpidump, dmesg. If not, how about reject this bug?
    Thanks.

Comment 4 Roland Kletzing 2009-03-22 07:57:23 UTC

this more looks like a hacking/breakin attempt (exploiting directory traversal flaw).
don`t know if spiderkid is part of linux kernel community and if that was a breakin attempt or just a message to the bugzilla admins to fix the bugzilla software. from what it looks, this bugzilla is possibly affected from http://www.vuxml.org/freebsd/1d96305d-6ae6-11dd-91d5-000c29d47fd7.html (found that after some googling for "bugzilla directory traversal"

we should forward that to the bugzilla admins - the problem is: bugzilla.kernel.org shows no contact adress and i don`t know whom to tell.....

Comment 5 John 'Warthog9' Hawley 2009-03-25 05:37:42 UTC

adding some additional data to this:

Alan Cox was kind enough to point this out:
    Bugzilla 2.2 (the one on the site) has a bug where you can attach local
    filestore to the attachments due to a bugzilla bug:

    https://bugzilla.mozilla.org/show_bug.cgi?id=437169

Also after checking through the database this seems to be the only instance of this.  spiderkid's account has been disabled, and bugzilla has had a full upgrade from 2.22.2 to 3.2.2.

Comment 6 John 'Warthog9' Hawley 2009-03-25 05:46:46 UTC

adding some additional data to this:

Alan Cox was kind enough to point this out:
    Bugzilla 2.2 (the one on the site) has a bug where you can attach local
    filestore to the attachments due to a bugzilla bug:

    https://bugzilla.mozilla.org/show_bug.cgi?id=437169

Also after checking through the database this seems to be the only instance of this.  spiderkid's account has been disabled, and bugzilla has had a full upgrade from 2.22.2 to 3.2.2.