From 336ac6595e8c5dad1ad6b7310c9a4eca404ac1ea Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?KinJih=20=EF=A3=BF?= Date: Sun, 24 Dec 2023 16:51:54 +0800 Subject: [PATCH] Revise article --- .../Progress+WS_FTP+Server+RCE-CVE-2023-40044/index.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/content/posts/Progress+WS_FTP+Server+RCE-CVE-2023-40044/index.md b/content/posts/Progress+WS_FTP+Server+RCE-CVE-2023-40044/index.md index 1e7f11b..230477d 100644 --- a/content/posts/Progress+WS_FTP+Server+RCE-CVE-2023-40044/index.md +++ b/content/posts/Progress+WS_FTP+Server+RCE-CVE-2023-40044/index.md @@ -85,9 +85,9 @@ private FormStream.SectionResult ProcessField(byte[] bytes, int pos) ``` `Write()` 方法會遍歷 HTTP form-data,搜尋邊界字串並解析每個欄位的標頭。 要觸發 `ProcessField()` 方法,必須滿足以下條件: -1. `this._inField` 必須為 true. -2. multipart 欄位的標頭不能包含 `filename` 以及 `Content-Disposition`. -3. `this._inFile` 必須是 false. +1. `this._inField` 必須為 `true` +2. multipart 欄位的標頭不能包含 `filename` 以及 `Content-Disposition` +3. `this._inFile` 必須是 `false` ```C# public override void Write(byte[] bytes, int offset, int count) @@ -175,7 +175,7 @@ public override void Write(byte[] bytes, int offset, int count) ``` ### UploadModule Class -`UploadModule` 確定傳入的 HTTP 請求是否是 multipart 檔案上傳。如果是,`Context_AcquireRequestState()` 方法將建立一個`FormStream`物件,該物件會呼叫 `Write()` 方法來處理請求。 +`UploadModule` 確定傳入的 HTTP 請求是否是 multipart 檔案上傳。如果是 multipart 檔案上傳,`Context_AcquireRequestState()` 方法將會建立一個`FormStream`物件,該物件會呼叫 `Write()` 方法來處理此請求。 ```C# public class UploadModule : IHttpModule