You are viewing a plain text version of this content. The canonical link for it is here.

Posted to apache-bugdb@apache.org by dg...@hyperreal.org on 1998/01/22 01:17:13 UTC

Re: mod_include/1203: possible ../ attack in mod_include

[In order for any reply to be added to the PR database, ]
[you need to include <ap...@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]


Synopsis: possible ../ attack in mod_include

State-Changed-From-To: open-analyzed
State-Changed-By: dgaudet
State-Changed-When: Wed Jan 21 16:17:12 PST 1998
State-Changed-Why:
This problem is fixed in 1.2.  And in 1.3 it's fixed for unix,
but not for win32 yet.