>Number:         1735
>Category:       config
>Synopsis:       Files in cgi-bin displayed instead of executed in 1.2.5
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Jan 27 13:10:00 PST 1998
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.2.5
>Environment:
uname -a says:
NetBSD sport.psc.edu 1.3 NetBSD 1.3 (SPORT) #1: Fri Jan 16 15:15:45 EST 1998    
 [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/SPORT i386

Standard configuration with AFS (a much-improved NFS) added.  Nothing is in AFS
though, so that's probably not an issue.
>Description:
In srm.conf, I have:
DocumentRoot /var/gnats/www
ScriptAlias /cgi-bin/ /var/gnats/www/cgi-bin

If I try to access a file in /var/gnats/www/cgi-bin, the file is displayed
by the web browser rather than executed.

The access_log shows:
128.182.61.58 - - [27/Jan/1998:14:15:59 -0500] "GET /cgi-bin/pr.pl HTTP/1.0" 200
 45154

There's nothing in error_log.

>How-To-Repeat:
The URL's http://sport.psc.edu:6666/cgi-bin/pr.pl
but ther's a firewall, so you won't be able to check it.
>Fix:
I'm guessing that the server is looking at the DocumentRoot before it looks at
the ScriptAlias.  If there was a way to check the ScriptAlias first, that might
fix things.
%0
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]



Reply via email to