httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 30439] New: - Serious bug with VirtualDocumentRoot : List EVERY directories
Date Mon, 02 Aug 2004 20:49:11 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=30439>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=30439

Serious bug with VirtualDocumentRoot : List EVERY directories

           Summary: Serious bug with VirtualDocumentRoot : List EVERY
                    directories
           Product: Apache httpd-2.0
           Version: 2.0.50
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: mod_vhost_alias
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: olivier@reagi.com


For all websites using VirtualDocumentRoot, there's a bug that allow to list 
every directories in DocumentRoot.

Example
-------
DocumentRoot /home/mysite/www
VirtualDocumentRoot /home/mysite/%-3+

http://%20.mysite.com

And there is a listing of ALL directories in /home/mysite

How to fix it
-------------
Without modifying the source, you can set /home/mysite/.htacess to :
***[START]***
Options -Indexes
***[END]***


This bug wa

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message