[22618] in bugtraq
Re: More security problems in Apache on Mac OS X
daemon@ATHENA.MIT.EDU (Jeremey A. Mates)
Wed Sep 12 00:11:54 2001
Date: Tue, 11 Sep 2001 19:13:25 -0700
From: "Jeremey A. Mates" <jmates@sial.org>
To: bugtraq@securityfocus.com
Message-ID: <20010911191325.B29313@darkness.sial.org>
Mail-Followup-To: "Jeremey A. Mates" <jmates@darkness.sial.org>,
bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <sb9e2faf.002@siskiyou.sou.edu>
Sigh, check current configs, then send email.
I also was initially using the:
<FilesMatch "^\.">
regex, which has the unexpected habit of blocking the ".." directory,
which breaks the "click here for parent directory" links in the Index
listings (if memory serves, my change log on http.conf doesn't list
the exact problem).
The current block I'm using for sites that do not have dot files is:
<Files ~ "^\.[^.]">
Order allow,deny
Deny from all
</Files>
Which allows .. to work properly.
--
Jeremy Mates http://www.sial.org/
"You cannot control, only catch." -- Tsung Tsai
