5888 matches found
Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem
Overview The Apache 1.3.14 web server's file access protection scheme can be bypassed for the Mac OS X HFS+ filesystem. Description The Apache web server's file access protection scheme i.e., file request "filtering" assumes that the filesystem being protected is case sensitve. For example, in a...
Проблемы с защитой директорий в Apache под MacOS (case insensitive filesystem)
При использовании файловой системы с наименованием файлов не чуствительным к реестру можно обойти защиту каталогов...
Mac OS X - Apache & Case Insensitive Filesystems
Environment: Mac OS X 10.0.3 / Darwin 1.3.3 Apache 1.3.14 This is the the default setup, out of the box, with available software updates installed. Please note, this is OS X Client. Who is affected: Everybody who used Apache on Mac OS X Client with the following conditions: + Documents are on a...
Apache 1.3.14 - Mac File Protection Bypass
source: https://www.securityfocus.com/bid/2852/info A vulnerability exists when Apache webserver is used with Mac OS X Client. The standard filesystem for Mac OS X is HFS+. HFS+ is case insensitive while Apache's filtering is case sensitive. The result is that Apache will filter all file requests...
Apache 1.3.14 - Mac File Protection Bypass
Apache 1.3.14 - Mac File Protection Bypass source: https://www.securityfocus.com/bid/2852/info A vulnerability exists when Apache webserver is used with Mac OS X Client. The standard filesystem for Mac OS X is HFS+. HFS+ is case insensitive while Apache's filtering is case sensitive. The result i...
CVE-2000-0498: Improper Handling of Case Sensitivity
Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case...
CVE-2000-0499
BEA WebLogic 3.1.8–4.5.1 is affected. The default configuration allows a remote attacker to view the source code of a JSP program by requesting a URL that exposes the JSP extension in upper case. Root cause: default config enables exposing JSP source. Impact: confidentiality of JSP source could b...
CVE-2000-0497: Improper Handling of Case Sensitivity
IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case...
CVE-2000-0499: Improper Handling of Case Sensitivity
The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case...
PT-2000-1435 · Ibm · Ibm Websphere Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere server version 3.0.2 Description: The issue allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in upper case. Recommendations: For IBM...
PT-2000-1437 · Bea · Bea Weblogic
Name of the Vulnerable Software and Affected Versions: BEA WebLogic versions 3.1.8 through 4.5.1 Description: The default configuration of the software allows a remote attacker to view the source code of a JSP program. This can be achieved by requesting a URL that provides the JSP extension in...
CVE-1999-0239: Improper Handling of Case Sensitivity
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET...
nt.case.symbolic.txt
Date: Fri, 12 Mar 1999 13:03:57 -0700 From: Mark To: [email protected] Subject: ALERT Case Sensitivity and Symbolic Links Prasad Dabak of Cybermedia Software Private Limited has discovered yet another security risk in Windows NT involving the operating system's case sensitivity...
CVE-2026-5297
GitLab Core products (CE/EE) are affected by multiple vulnerabilities across various components (Jira integration, container registry, merge request policies, analytics dashboards, API input validation, etc.). The NCSC advisory cites issues including insufficient access controls, input validation...
MS:23958D45-CCD5-4791-AC7B-622C7096F067
...
CVE-2026-25845
The connected PT-2026-7101 entry associates CVE-2026-25845 with Cisco Webex Meeting Server and describes it as an Unvalidated Redirect vulnerability. Other provided sources do not offer additional technical details (no vendor/version specifics, impact, exploit, or remediation are disclosed in the...
CVE-2025-62442
CVE-2025-62442 is rejected/not used and does not represent an active vulnerability entry.