bugtraq - Re: Bug with .php extension?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 05 Dec 2005 11:31:41 +0100
From: Simon Richter <Simon.Richter@...yros.de>
To: Ron <iago@...hallalegends.com>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: Bug with .php extension?

Hello,

Ron wrote:

> In Apache 1.3.33 (untested on any other version), if you have a file 
> called file.php.bak, and you navigate to it in the browser, it will run 
> on the server as a .php file.  This works with any extension that isn't 
> known to the server (.rar, .bak, .test, .java, .cpp, .c, etc.)

I would think this is related to "Options MultiViews", where a file 
generally has many suffixes (file type, language, compression, ...). 
Does this also happen to you (yes, I'm too lazy to try right now) if you 
turn MultiViews off?

Nevertheless, good idea that script authors should possibly be aware 
that any suffix, not just the last, is interpreted.

    Simon

Download attachment "signature.asc" of type "application/pgp-signature" (308 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/