<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
  <channel>
    <title>Root directory listing = security hole - Apache Web servers - tribe.net</title>
    <link>http://apacheservers.tribe.net/thread/3b043b88-c121-47d7-80a5-7e7074af26fd?format=rss</link>
    <description>Tribe.net. Local Connections</description>
    <item>
      <title>Root directory listing = security hole</title>
      <link>http://ApacheServers.tribe.net/thread/3b043b88-c121-47d7-80a5-7e7074af26fd#dfbb32ce-ffba-463b-8ec7-172783563d18</link>
      <description>Hi!&#xD;
&#xD;
I read an article recently about a bug in the windows version of Apache where Apache would list the root directory of the server when it would encounter something like this:&#xD;
&#xD;
http://webserversname///////////////////////////////////////////////////////////&#xD;
&#xD;
'The trailing slashes could cause Apache to list the root directory of the server'&#xD;
&#xD;
So i'm not a Windows user when it comes to Apache, i've got it running under Redhat 8, and it's version 2.0.40, and guess what; it does the same thing!&#xD;
&#xD;
Has anyone experienced this before? I guess i need newer software, but preferrably a patch if there is any.&#xD;
&#xD;
Thanks..</description>
      <pubDate>Fri, 26 May 2006 08:52:25 GMT</pubDate>
      <guid isPermaLink="false">http://ApacheServers.tribe.net/thread/3b043b88-c121-47d7-80a5-7e7074af26fd#dfbb32ce-ffba-463b-8ec7-172783563d18</guid>
      <dc:creator>fish</dc:creator>
      <dc:date>2006-05-26T08:52:25Z</dc:date>
    </item>
  </channel>
</rss>



