[Xitami] /../../%20 thing

[Dan]

also something like 
host.com/file.php%20 
host.com/file.html%20 
throws a You are not authorised to access this resource 
so it much check for it in different ways

host/%20 also brings up that dir list




> What is more interesting is how xitami behaves to that request.....
> 
> http://127.0.0.1 -> returns homepage.
> http://127.0.0.1/../ -> returns home page.
> http://127.0.0.1/../%20/ --> returns a blank directory listing of... //
> supposedly ;)
> http://127.0.0.1/../%20/../ --> returns home page again.
> http://127.0.0.1/../%20/../%20/ -> returns a blank directory listing
> http://127.0.0.1/../%20/../%20/%20/ -> returns 404 not found.
> 
> 3 different methods of responding.....?
> Paul
> 
> 
> -----Original Message-----
> From: xitami-admin@lists.xitami.org
> [mailto:xitami-admin@lists.xitami.org]On Behalf Of Dan
> Sent: 04 June 2001 16:44
> To: xitami@lists.xitami.org
> Subject: [Xitami] /../../%20 thing
> 
> 
> Another Xitami DoS issue  ?
> 
> http://host/../../.././%20/
> 
> Shows a directoy listing,,, But got me what of ;)
> 
> 
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
> 
> 
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>