BugTraq
Re: Pi3Web 2.0.1 DoS May 30 2003 09:51AM
Holger Zimmermann (zimpel users sourceforge net)
In-Reply-To: <Law8-F81nLOyDc41W2u00004bb6 (at) hotmail (dot) com [email concealed]>

The problem was related to an additional PathInfo="Yes"

parameter in the PathMapper object for the WebRoot

mapping in version 2.0.1.

There is patch available for a longer time, which fixes

this issue in the administration client :

http://sourceforge.net/tracker/download.php?group_id=17753&atid=317753&f
ile_id=47258&aid=718552

Note, that a related issue has been reported for the unix

version of Pi3Web 2.0.1:

http://www.securityfocus.com/archive/1/321177

http://www.securityfocus.com/bid/7555

Follow the information posted there in order to fix the

problem in the configuration.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus