[Xitami] /../../%20 thing

[Ewen McNeill]

In message <000901c0ed0d$26aa59f0$0c02a8c0@dan>, "Dan" writes:
>Another Xitami DoS issue  ?
>http://host/../../.././%20/

If Xitami keeps on serving up webpages like normal, then it's not a
denial-of-service :-)

However it might be a bug.  If I understand you correctly you're saying 
that an (encoded) space as the last element of the path name gives you a
directory listing.  Do you have directory listings enabled?  Which
directory is it that is listed?

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com