[Xitami] /../../%20 thing

[Paul Richards]

What is more interesting is how xitami behaves to that request.....

http://127.0.0.1 -> returns homepage.
http://127.0.0.1/../ -> returns home page.
http://127.0.0.1/../%20/ --> returns a blank directory listing of... //
supposedly ;)
http://127.0.0.1/../%20/../ --> returns home page again.
http://127.0.0.1/../%20/../%20/ -> returns a blank directory listing
http://127.0.0.1/../%20/../%20/%20/ -> returns 404 not found.

3 different methods of responding.....?
Paul


-----Original Message-----
From: xitami-admin@lists.xitami.org
[mailto:xitami-admin@lists.xitami.org]On Behalf Of Dan
Sent: 04 June 2001 16:44
To: xitami@lists.xitami.org
Subject: [Xitami] /../../%20 thing


Another Xitami DoS issue  ?

http://host/../../.././%20/

Shows a directoy listing,,, But got me what of ;)



--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami