[Xitami] /../../%20 thing

[Paul Richards]

Ewen..... in ascii text format.... copied/pasted from default install....
the directory listing showing below.... so it's of the "/ /" directory. ;)
Paul

 / /

----------------------------------------------------------------------------
----
Name Size Modified

----------------------------------------------------------------------------
----

Powered by Xitami!


-----Original Message-----
From: xitami-admin@lists.xitami.org
[mailto:xitami-admin@lists.xitami.org]On Behalf Of Ewen McNeill
Sent: 05 June 2001 16:49
To: xitami@lists.xitami.org
Subject: Re: [Xitami] /../../%20 thing


In message <000901c0ed0d$26aa59f0$0c02a8c0@dan>, "Dan" writes:
>Another Xitami DoS issue  ?
>http://host/../../.././%20/

If Xitami keeps on serving up webpages like normal, then it's not a
denial-of-service :-)

However it might be a bug.  If I understand you correctly you're saying
that an (encoded) space as the last element of the path name gives you a
directory listing.  Do you have directory listings enabled?  Which
directory is it that is listed?

Ewen

--
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com

--
Xitami Users Mailing List -- For Xitami support
To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami