www-sql .htaccess bypass Vulnerability
BID:2317
Info
www-sql .htaccess bypass Vulnerability
| Bugtraq ID: | 2317 |
| Class: | Atomicity Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 01 1998 12:00AM |
| Updated: | Feb 01 1998 12:00AM |
| Credit: | Discovered by Mr LEROY christophe < [email protected] >. |
| Vulnerable: |
James Henstridge www-sql 0.4.4 |
| Not Vulnerable: |
James Henstridge www-sql 0.5 .0 |
Discussion
www-sql .htaccess bypass Vulnerability
The www-sql HTTP database access script versions prior to 0.5.0 failed to authenticate remote users requesting files on the web site protected by .htaccess restrictions under the Apache web server.
The www-sql HTTP database access script versions prior to 0.5.0 failed to authenticate remote users requesting files on the web site protected by .htaccess restrictions under the Apache web server.
Solution / Fix
www-sql .htaccess bypass Vulnerability
Solution:
Version 0.5.0 of the script addresses this issue.
Solution:
Version 0.5.0 of the script addresses this issue.