RE: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS

From: Brian Dinello (brian.dinello@vigilantminds.com)
Date: 07/28/01 

Message-ID: <9B515520AA3CD411B36900508B6636B508F8C9BC@mi8nycmail02.mi8.com>
From: Brian Dinello <brian.dinello@vigilantminds.com>
To: 'Moorjani uday' <moorjani@svenson.gp>, "'bugtraq@securityfocus.com'" <bugtraq@securityfocus.com>
Subject: RE: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS
Date: Fri, 27 Jul 2001 18:12:11 -0400

As we don't have access to all versions of Apache on all platforms, I can't
say for certain that this will work on all of them. The version that we
have successfully tested on with 100% consistency is Apache 1.3.12 on NT4.

Please let me know if you duplicate this success on any other platforms.

Brian

-----Original Message-----
From: Moorjani uday [mailto:moorjani@svenson.gp]
Sent: Friday, July 27, 2001 1:47 PM
To: Brian Dinello
Cc: bugtraq@securityfocus.com
Subject: Re: Apache Artificially Long Slash Path Directory Listing
Vulnerability -- FILE READ ACCESS

Hi sir,

I seem to have tested your statings on Apache AdvanceExtranetServer 1.3.12
on Mandrake Corporate Server 1.01 and the following still seems to give me
my default Apache page, please do correct me if I'm wrong though.

Uday Moorjani

Relevant Pages