Re: [cobalt-security] Cobalt Cube Webmail directory traversal (fwd)

[Gossi The Dog]

On Fri, 6 Jul 2001, shimi wrote:

<snip>

> And in any case I am still correct... if a webserver has a server root, in
> no case the webserver shall send out a page on a directory upper than it's
> server root. That's only my opinion, though... (chroot was made for
> limiting software to the exact same thing)

Apache ships with chroot support - Cobalt don't use it by default.

_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security