Tested against Apache 1.3.20 on Windows 98 SE (has case insensitive fs) appears not to be vulnerable. > Summary: > > > The preferred filesystem for Mac OS X is Apple's HFS+ and most > setups use it. HFS+ is a case insensitive filesystem. > > > Apache's directory protection (and other methods that depend on > filesystem object names) cannot handle this and breaks. For example, > both Directory and Location configuration options break. > > > > Preferred solution: > > > Modification to Apache so that it does a check for the 'real' > filename. This probably needs some support from the underlying > operating system. > > > Or Apple should submit their HFS+ patches to the Apache Software > Foundation or install the mod_hfs_apple.so module on OS X Client. Looks like the win32 coding types at apache already whacked this problem. Wonder how it was done there ?? Regards, Mark Ng, Network Manager, Quantum Business Media
This archive was generated by hypermail 2b30 : Tue Jun 12 2001 - 13:23:24 PDT