[Bug 62524] Multiviews - Information Disclosure

2018-07-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62524 William A. Rowe Jr. changed: What|Removed |Added Resolution|--- |INVALID Status|NEW

[Bug 62524] Multiviews - Information Disclosure

2018-07-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62524 Eric Covener changed: What|Removed |Added Version|2.2.29 |2.4.29 --- Comment #4 from Eric

[Bug 62524] Multiviews - Information Disclosure

2018-07-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62524 --- Comment #3 from Richard Hawkesford --- The above totally bypassing the custom 404 setups. And confirming that the file exists. -- You are receiving this mail because: You are the assignee for the bug.

[Bug 62524] Multiviews - Information Disclosure

2018-07-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62524 --- Comment #2 from Richard Hawkesford --- And on the live server (HTTPS): Forbidden You don't have permission to access /.htaccess/testing on this server. Apache Server at www.xxx.com Port 80 -- You are receiving this mail because: You are

[Bug 62524] Multiviews - Information Disclosure

2018-07-05 Thread bugzilla
https://bz.apache.org/bugzilla/show_bug.cgi?id=62524 --- Comment #1 from Richard Hawkesford --- Side note: requests to https://192.168.1.30/dir/test/fake.html Bypass the .htaccess "ErrorDocument 404" and have the wrong port number? Not Found The requested URL /dir/test/fake.html was not found