httpd security patch
Kevin 'Kev' Hughes (kevinh)
Mon, 28 Mar 94 09:28:59 PST
> A vulnerability has been identified with NCSA httpd 1.1's access
> control. The impact of this is that if you have files which are
> protected by httpd's access control via the global ACF access.conf,
> the protection can be circumvented and access can be gained to the
> files regardless of the client's DNS hostname, host IP address, or
> HTTP user name.
Just so everyone knows, EIT's server and the CommerceNet server
have been patched.
-- Kev