NetBSD-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

bin/47925: bozzohttpd nits



>Number:         47925
>Category:       bin
>Synopsis:       bozzohttpd does not authenticate redirects and creates broken 
>redirects
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jun 14 12:25:00 +0000 2013
>Originator:     Martin Husemann
>Release:        NetBSD 6.1_STABLE
>Organization:
The NetBSD Foundation, Inc.
>Environment:
System: NetBSD night-porter.duskware.de 6.1_STABLE NetBSD 6.1_STABLE (PORTER) 
#6: Wed May 29 21:38:20 CEST 2013 
martin%night-porter.duskware.de@localhost:/usr/src-6/sys/arch/i386/compile/PORTER
 i386
Architecture: i386
Machine: i386
>Description:

When using a .bzredirect link in a directory with a .httpasswd file, httpd
does not require authentication before redirecting.

When expanding a directory url in a virtual server (-v option), an bogus
redirect ist generated (apparently uninitialized characters plus the final
part of the url, but no /index.html appended)

>How-To-Repeat:
s/a

>Fix:
looking at it, this is just a reminder



Home | Main Index | Thread Index | Old Index