Re: Pi3Web 2.0.1 DoS

From: Holger Zimmermann (zimpel_at_users.sourceforge.net)
Date: 05/30/03

  • Next message: Luca Ercoli: "Remote DoS in Desktop Orbiter" 
    Date: 30 May 2003 09:51:57 -0000
To: bugtraq@securityfocus.com
    ('binary' encoding is not supported, stored as-is) In-Reply-To: <Law8-F81nLOyDc41W2u00004bb6@hotmail.com>

    The problem was related to an additional PathInfo="Yes"
    parameter in the PathMapper object for the WebRoot
    mapping in version 2.0.1.

    There is patch available for a longer time, which fixes
    this issue in the administration client :

    http://sourceforge.net/tracker/download.php?group_id=17753&atid=317753&file_id=47258&aid=718552

    Note, that a related issue has been reported for the unix
    version of Pi3Web 2.0.1:
    http://www.securityfocus.com/archive/1/321177
    http://www.securityfocus.com/bid/7555

    Follow the information posted there in order to fix the
    problem in the configuration.

  • Next message: Luca Ercoli: "Remote DoS in Desktop Orbiter"

    Relevant Pages