bugtraq - Re: Apache directory traversal on shared hosting environment.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20090219170358.3386.qmail@securityfocus.com>
Date: 19 Feb 2009 17:03:58 -0000
From: dave@...tuity.biz
To: bugtraq@...urityfocus.com
Subject: Re: Apache directory traversal on shared hosting environment.

Sounds like you can fix this also with the Apache configuration directives you list in the report. So, it seems that you simply need to update your httpd.conf to proper settings for shared hosting and that there is no vulnerability, except that your configuration is vulnerable.