You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2004/08/02 22:49:11 UTC
DO NOT REPLY [Bug 30439] New: -
Serious bug with VirtualDocumentRoot : List EVERY directories
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=30439>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=30439
Serious bug with VirtualDocumentRoot : List EVERY directories
Summary: Serious bug with VirtualDocumentRoot : List EVERY
directories
Product: Apache httpd-2.0
Version: 2.0.50
Platform: All
OS/Version: Linux
Status: NEW
Severity: Critical
Priority: Other
Component: mod_vhost_alias
AssignedTo: bugs@httpd.apache.org
ReportedBy: olivier@reagi.com
For all websites using VirtualDocumentRoot, there's a bug that allow to list
every directories in DocumentRoot.
Example
-------
DocumentRoot /home/mysite/www
VirtualDocumentRoot /home/mysite/%-3+
http://%20.mysite.com
And there is a listing of ALL directories in /home/mysite
How to fix it
-------------
Without modifying the source, you can set /home/mysite/.htacess to :
***[START]***
Options -Indexes
***[END]***
This bug wa
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org