bugtraq - Re: Pi3Web 2.0.1 DoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030530095157.8371.qmail@www.securityfocus.com>
Date: 30 May 2003 09:51:57 -0000
From: Holger Zimmermann <zimpel@...rs.sourceforge.net>
To: bugtraq@...urityfocus.com
Subject: Re: Pi3Web 2.0.1 DoS

In-Reply-To: <Law8-F81nLOyDc41W2u00004bb6@...mail.com>

The problem was related to an additional PathInfo="Yes"
parameter in the PathMapper object for the WebRoot
mapping in version 2.0.1.

There is patch available for a longer time, which fixes
this issue in the administration client :

http://sourceforge.net/tracker/download.php?group_id=17753&atid=317753&file_id=47258&aid=718552

Note, that a related issue has been reported for the unix
version of Pi3Web 2.0.1:
http://www.securityfocus.com/archive/1/321177
http://www.securityfocus.com/bid/7555

Follow the information posted there in order to fix the
problem in the configuration.