Vulnerability Development mailing list archives

Re: CGI source being exposed using "~"


From: oysteivi () TIHLDE ORG (Oystein Viggen)
Date: Tue, 9 May 2000 14:17:34 +0200


Brian McKinney spake thus:

Andrew Reisse said:

<On my servers, I put a section like this in httpd.conf to prevent editor
<backups from being read (which, as you said, might contain passwords or
<other interesting data)

<Files ~ "^\~">
    Order allow,deny
    Deny from all
</Files>

Try this instead:

<Files ~ "*\~">
    Order allow,deny
    Deny from all
</Files>

Seeing as the ^ is right above the * (at least on scandinavian keyboards
and probably many others), it's quite an understandable typo... :)

Oystein

--
Some Norwegian



Current thread: