66 matches found
Updated git packages fix security vulnerability
It was reported that git, when used as a client on a case-insensitive filesystem, could allow the overwrite of the .git/config file when the client performed a "git pull". Because git permitted committing .Git/config or any case variation, on the pull this would replace the user's .git/config. If...
DEBIAN-CVE-2008-4360
moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...
CVE-2006-0760
LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP...
Design/Logic Flaw
LightTPD 1.4.8 and earlier, when the web root is on a case-insensitive filesystem, allows remote attackers to bypass URL checks and obtain sensitive information via file extensions with unexpected capitalization, as demonstrated by a request for index.PHP when the configuration invokes the PHP...
Проблемы с защитой директорий в Apache под MacOS (case insensitive filesystem)
При использовании файловой системы с наименованием файлов не чуствительным к реестру можно обойти защиту каталогов...
Mac OS X - Apache & Case Insensitive Filesystems
Environment: Mac OS X 10.0.3 / Darwin 1.3.3 Apache 1.3.14 This is the the default setup, out of the box, with available software updates installed. Please note, this is OS X Client. Who is affected: Everybody who used Apache on Mac OS X Client with the following conditions: + Documents are on a...