Re: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS

From: Andreas Schmitz (stranger@sammael.tabu.stw-bonn.de)
Date: 07/28/01

Previous message: Stephen Cope: "Re: Apache Artificially Long Slash Path Directory Listing Vulnerabili ty -- FILE READ ACCESS"
In reply to: Brian Dinello: "RE: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Sat, 28 Jul 2001 00:39:55 +0200
To: Bugtraq <bugtraq@securityfocus.com>
Subject: Re: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS
Message-ID: <20010728003955.A3565@sammael.tabu.stw-bonn.de>
From: Andreas Schmitz <stranger@sammael.tabu.stw-bonn.de>

Brian Dinello wrote:

> Please let me know if you duplicate this success on any other platforms.

I have a success, but no vulnerability on Apache 1.3.9 running on
Debian/GNU Linux potato (2.2). Like Uday Moorjani I just get my default
Apache page. I don't thing I miscounted the /es, cut'n'waste is mostly
quite reliable ;-)

Andreas

Previous message: Stephen Cope: "Re: Apache Artificially Long Slash Path Directory Listing Vulnerabili ty -- FILE READ ACCESS"
In reply to: Brian Dinello: "RE: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Will apache2, php5, mcrypt,etc run on solaris 10 x86 in 64 bit
... Anyone got the whole apache, ... anyone has got this config running well in 64 bit. ... Has anyone had any success? ... ulimit reports that the hard limit for open files is 65536 ...
(comp.unix.solaris)
Re: [PHP] Unable to use exec() in php
... I am using execfuntions to run simple commands like execin php ... without any success. ... I am using apache on my windows system. ...
(php.general)
Re: invoke-rc.d: initscript apache, action "start" failed.
... > Has anyone been able to duplicate this problem? ... Other people exerience the very same error, ... apache appears not to be installed ... which is just what the Debian Apache Maintainers will tell you. ...
(Debian-User)
RE: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS
... Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS ... Please let me know if you duplicate this success on any other platforms. ...
(Bugtraq)
Re: Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS
... Apache Artificially Long Slash Path Directory Listing Vulnera bility -- FILE READ ACCESS ... > Please let me know if you duplicate this success on any other platforms. ...
(Bugtraq)