Andrea just found a bug in kHTTPd in 2.3.14, of the brown-paperbag-kind.
I don't know how the h*ll this ever worked. (It did work when I coded it,
I can't trace when it stopped working). If you are using kHTTPd, you
should apply this patch.
Greetings,
Arjan van de Ven
--- linux/net/khttpd/security.c~ Thu Aug 19 20:40:23 1999
+++ linux/net/khttpd/security.c Thu Aug 19 20:40:42 1999
@@ -156,7 +156,7 @@
while (List!=NULL)
{
- if (strstr(List->value,Filename)!=NULL)
+ if (strstr(Filename,List->value)!=NULL)
{
if (filp!=NULL)
fput(filp);
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/