You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Rob Hartill <ha...@hyperreal.com> on 1995/11/29 18:46:13 UTC

WWW Form Bug Report: "WARNING: using /./ in URLS may override access protection" on SunOS 4.x (fwd)

no ack sent

Forwarded message:
> From nobody@hyperreal.com  Wed Nov 29 07:51:48 1995
> Message-Id: <19...@taz.hyperreal.com>
> From: boland@sci.kun.nl
> To: apache-bugs%apache.org@organic.com
> Date: Wed Nov 29  7:51:37 1995
> Subject: WWW Form Bug Report: "WARNING: using  /./ in URLS may override access protection" on SunOS 4.x
> 
> Submitter: boland@sci.kun.nl
> Operating system: SunOS 4.x, version: 
> Extra Modules used: 
> URL exhibiting problem: 
> 
> Symptoms:
> --
> Let's say symlinks are allowed everywhere
> on the httpd tree, except for a directory
> /protected/ (not aliased)
> There is a symbolic link called symlink in
> /protected/.
> 
> A request for /protected/symlink obviously fails,
> but a request for /./protected/symlink works!!!!!
> 
> --
> 
> Backtrace:
> --
> 
> --
>