Bugtraq mailing list archives
Re: Pi3Web 2.0.1 DoS
From: Holger Zimmermann <zimpel () users sourceforge net>
Date: 30 May 2003 09:51:57 -0000
In-Reply-To: <Law8-F81nLOyDc41W2u00004bb6 () hotmail com> The problem was related to an additional PathInfo="Yes" parameter in the PathMapper object for the WebRoot mapping in version 2.0.1. There is patch available for a longer time, which fixes this issue in the administration client : http://sourceforge.net/tracker/download.php?group_id=17753&atid=317753&file_id=47258&aid=718552 Note, that a related issue has been reported for the unix version of Pi3Web 2.0.1: http://www.securityfocus.com/archive/1/321177 http://www.securityfocus.com/bid/7555 Follow the information posted there in order to fix the problem in the configuration.
Current thread:
- Re: Pi3Web 2.0.1 DoS Holger Zimmermann (Jun 01)