SUSE CVE-2011-0449

actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action...

CVE-2001-0766

CVE-2001-0766 affects Apache on MacOS X Client 10.0.3 with HFS+; a case-insensitive filesystem leads to bypassing URL-based access filters. The root cause is that Apache’s file access protection assumes a case-sensitive FS, so URLs with mixed case can bypass / restrictions, potentially exposing p...

PT-2001-1946 · Apache +1 · Apache +2

Name of the Vulnerable Software and Affected Versions: Apache versions 1.3.19 and earlier on MacOS X Client 10.0.3 with the HFS+ file system Description: The issue allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's...