Tested against Apache 1.3.20 on Windows 98 SE (has case insensitive fs) appears not to be vulnerable. > Summary: > > > The preferred filesystem for Mac OS X is Apple's HFS+ and most > setups use it. HFS+ is a case insensitive filesystem. > > > Apache's directory protection (and other methods that depend on > filesystem object names) cannot handle this and breaks. For example, > both Directory and Location configuration options break. > > > > Preferred solution: > > > Modification to Apache so that it does a check for the 'real' > filename. This probably needs some support from the underlying > operating system. > > > Or Apple should submit their HFS+ patches to the Apache Software > Foundation or install the mod_hfs_apple.so module on OS X Client. Looks like the win32 coding types at apache already whacked this problem. Wonder how it was done there ?? Regards, Mark Ng, Network Manager, Quantum Business Media
