Package: thttpd Severity: normal
Some cgi-bin programs (like dwww) have paths passed to themselves by being called with the form /cgi-bin/cgi-prog/path/to/pass where /cgi-bin/cgi-prog is the actual cgi-bin and /path/to/pass is an additional path to pass. With thttpd this does not work and thttpd reports that the files is outside ther permitted web server directory, probably because there is no file /cgi-bin/cgi-prog/path/to/pass. -- System Information: Debian Release: 5.0 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages thttpd depends on: ii libc6 2.7-16 GNU C Library: Shared libraries ii logrotate 3.7.1-5 Log rotation utility thttpd recommends no packages. Versions of packages thttpd suggests: pn thttpd-util <none> (no description available) -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
