www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joseph W." <snif...@goodnet.com>
Subject Re: mod_include/3323: Dos style attack with the usage of SSI's include virtual directive
Date Sat, 31 Oct 1998 18:30:00 GMT
The following reply was made to PR mod_include/3323; it has been noted by GNATS.

From: "Joseph W." <sniffen@goodnet.com>
To: apbugs@Apache.Org
Cc:  Subject: Re: mod_include/3323: Dos style attack with the usage of SSI's include virtual
directive
Date: Sat, 31 Oct 1998 11:17:08 -0700

 That is exactly this case, recursive includes.
 The only problem here though is that it eventually will crash
 the machine. At least the machine that this was tested on.
 
 I guess we will have to trust our users that they won't try to
 exploit this for now. <g>
 
 

Mime
View raw message