| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 30 May 2003 09:51:57 -0000 From: Holger Zimmermann <zimpel@...rs.sourceforge.net> To: bugtraq@...urityfocus.com Subject: Re: Pi3Web 2.0.1 DoS In-Reply-To: <Law8-F81nLOyDc41W2u00004bb6@...mail.com> The problem was related to an additional PathInfo="Yes" parameter in the PathMapper object for the WebRoot mapping in version 2.0.1. There is patch available for a longer time, which fixes this issue in the administration client : http://sourceforge.net/tracker/download.php?group_id=17753&atid=317753&file_id=47258&aid=718552 Note, that a related issue has been reported for the unix version of Pi3Web 2.0.1: http://www.securityfocus.com/archive/1/321177 http://www.securityfocus.com/bid/7555 Follow the information posted there in order to fix the problem in the configuration.
Powered by blists - more mailing lists