>Number: 678 >Category: mod_cgi >Synopsis: PATH_TRANSLATED for user CGI programs based on document root >Confidential: no >Severity: non-critical >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Wed Jun 4 18:20:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2b10 >Environment: NetBSD 1.2E/pmax on a DECstation 3100. Server compiled with gcc version 2.7.2.2 >Description: The PATH_TRANSLATED CGI variable is based on the server document root, not the user's www directory when running a user's CGI program under the user's www home >How-To-Repeat: http://server/~user/something.cgi, where something.cgi prints the values of PATH_TRANSLATED >Fix: Make PATH_TRANSLATED for user CGI programs be set based on the path to the user's www director >Audit-Trail: >Unformatted:
