Bitcoin Forum
December 14, 2024, 01:47:27 PM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Bug in rpc server?  (Read 767 times)
mb300sd (OP)
Legendary
*
Offline Offline

Activity: 1260
Merit: 1000

Drunk Posts


View Profile WWW
June 18, 2012, 08:51:28 PM
 #1

Noticed this while sniffing packets... Shouldn't those constants be replaced?

POST / HTTP/1.1
Authorization: Basic cnBjdXNlcjE6cnBjcGFzczE=
Host: 98.245.34.4:18332
Accept: */*
Accept-Encoding: deflate, gzip
Content-type: application/json
Content-Length: 45
User-Agent: cpuminer 1.0.2

{"method": "getwork", "params": [], "id":0}

HTTP/1.1 200 OK
Date: Mon, 18 Jun 2012 20:50:03 +0000
Connection: close
Content-Length: 592
Content-Type: application/json
Server: bitcoin-json-rpc/vCLIENT_VERSION_MAJOR.CLIENT_VERSION_MINOR.CLIENT_VERSION_REVISION.CLIENT_VERSION_BUILD-g8ff1873-beta

{"result":{"midstate":"9e12084d89c70bde20a33d112462c6e42faf12316492f6177a35394f484b9204","data":"0000000137c1cf4e3c8b0fdf133752886c5b0f646454c71242ed6b10aca8239a0000000a344394e c933b376d4660c20718fac84aab079f0611f2c04359060fcee32d72634fdf947b1d0fffff000000 0000000080000000000000000000000000000000000000000000000000000000000000000000000 0000000000080020000","hash1":"0000000000000000000000000000000000000000000000000000000000000000000000800000000 0000000000000000000000000000000000000000000010000","target":"0000000000000000000000000000000000000000000000000000ffff0f000000"},"error":null,"id":0}


And its testnet, so I don't care if you rpc in and steal my coins...

1D7FJWRzeKa4SLmTznd3JpeNU13L1ErEco
Diapolo
Hero Member
*****
Offline Offline

Activity: 772
Merit: 500



View Profile WWW
June 20, 2012, 04:57:21 AM
 #2

Seems to be only a false version string, there were changes some weeks ago ... is that from an official client version?
Should be no security risk.

Dia

Liked my former work for Bitcoin Core? Drop me a donation via:
1PwnvixzVAKnAqp8LCV8iuv7ohzX2pbn5x
bitcoin:1PwnvixzVAKnAqp8LCV8iuv7ohzX2pbn5x?label=Diapolo
mb300sd (OP)
Legendary
*
Offline Offline

Activity: 1260
Merit: 1000

Drunk Posts


View Profile WWW
June 20, 2012, 06:01:51 AM
 #3

Seems to be only a false version string, there were changes some weeks ago ... is that from an official client version?
Should be no security risk.

Dia

Ubuntu ppa. I know theres no security risk, just thought I'd post it.

1D7FJWRzeKa4SLmTznd3JpeNU13L1ErEco
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!