• info
• discussion
• exploit
• solution
• references

OpenBSD httpd Access Rule Bypass Vulnerability

Solution:
Fixes are available:


OpenBSD OpenBSD 3.4

• OpenBSD 014_httpd2.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/014_httpd2.patch

OpenBSD OpenBSD 3.3

• OpenBSD 019_httpd2.patch
  ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.3/common/019_httpd2.patch