Thanks for reporting. The directory traversal is a flaw in shttpd, for win32 only. Source disclosure was a surprise for me. Apparently, this is a windows feature. When you try to open a file named like "a.exe " (note trailing space), windows actually opens "a.exe". I did not expect that.
sergey ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ shttpd-general mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shttpd-general
