Bug#517377: apache 1.3 shows perl script source in iphone-browser
On Friday 27 February 2009, Tobias Vogel wrote: > In case of a normal Firefox access: > +0100] "GET /wol/ HTTP/1.1" 304 - "https://proxy.xyz.ch/"; > "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.5) > Gecko/2008120121 Firefox/3.0.5" > > In case of the iphone-acess: > +0100] "GET /wol HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; U; CPU > iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, > like Gecko) Version/3.1.1 Mobile/5H11 Safari/525.20" You are accessing two different URLs here, /wol and /wol/ . In the second case, only the redirect is shown in the log. Maybe your iphone browser or some proxy in between has the script source in its cache from a time where cgi execution was not yet configured. Or you did something wrong when configuring cgis for directory /wol . -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#517377: apache 1.3 shows perl script source in iphone-browser
In case of a normal Firefox access: +0100] "GET /wol/ HTTP/1.1" 304 - "https://proxy.xyz.ch/"; "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.5) Gecko/2008120121 Firefox/3.0.5" In case of the iphone-acess: +0100] "GET /wol HTTP/1.1" 301 269 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 2_2_1 like Mac OS X; en-us) AppleWebKit/525.18.1 (KHTML, like Gecko) Version/3.1.1 Mobile/5H11 Safari/525.20" -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#517377: apache 1.3 shows perl script source in iphone-browser
On Friday 27 February 2009, Tobias Vogel wrote: > When a script called "index.cgi" is the directory-index in apache > 1.3 and this script is accessed using the iphone browser, apache > shows the script source of the perl script, even if the perl script > is correctly being executed when accessed with any other browser. Please provide access log entries for both cases. Are you sure you call exactly the same URL in both cases? Stefan -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Bug#517377: apache 1.3 shows perl script source in iphone-browser
Package: apache Version: 1.3.34-4.1+etch1 Severity: grave When a script called "index.cgi" is the directory-index in apache 1.3 and this script is accessed using the iphone browser, apache shows the script source of the perl script, even if the perl script is correctly being executed when accessed with any other browser. This might expose passwords and might be a severe security issue. I am using Debian GNU/Linux 4.0 Etch, kernel 2.6.18-6-vserver-686 -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
