Home page logo
/

bugtraq logo Bugtraq mailing list archives

FW: Mac OS X - Apache & Case Insensitive
From: hostmaster () qpp co uk
Date: Mon, 11 Jun 2001 18:41:10 +0000


Tested against Apache 1.3.20 on Windows 98 SE (has case insensitive fs) 
appears not to be vulnerable.


Summary:


  The preferred filesystem for Mac OS X is Apple's HFS+ and most
  setups use it. HFS+ is a case insensitive filesystem.


  Apache's directory protection (and other methods that depend on
  filesystem object names) cannot handle this and breaks. For example,
  both Directory and Location configuration options break.



Preferred solution:


  Modification to Apache so that it does a check for the 'real'
  filename. This probably needs some support from the underlying
  operating system.


  Or Apple should submit their HFS+ patches to the Apache Software
  Foundation or install the mod_hfs_apple.so module on OS X Client.

Looks like the win32 coding types at apache already whacked this problem. 
 Wonder how it was done there ??


Regards,


Mark Ng,
Network Manager,
Quantum Business Media


  By Date           By Thread  

Current thread:
  • FW: Mac OS X - Apache & Case Insensitive hostmaster (Jun 12)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault