Re: bozo .htpasswd exposure
Martin Husemann <[email protected]> Tue, 20 Nov 2018 15:31:44 +0100
| Newsgroups | gmane.os.netbsd.devel.security |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Nov 20, 2018 at 09:19:55AM -0500, JP wrote: > I don't see any code preventing the exposure of the file AUTH_FILE is missing from bozo_check_special_files() ? Martin