Skip to content

Commit 10b4899

Browse files
author
Till Brehm
committed
Fix #4699: Static AuthName for WebDav in Aapache (Fixes DoS vulnerability)
1 parent d0d2afa commit 10b4899

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

server/plugins-available/apache2_plugin.inc.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2785,7 +2785,7 @@ private function _patchVhostWebdav($fileName, $webdavRoot) {
27852785
$output .= " DAV On\n";
27862786
$output .= ' BrowserMatch "MSIE" AuthDigestEnableQueryStringHack=On'."\n";
27872787
$output .= " AuthType Digest\n";
2788-
$output .= " AuthName \"" . $fn . "\"\n";
2788+
$output .= " AuthName \"Restricted Area\"\n";
27892789
$output .= " AuthUserFile " . $webdavRoot . '/' . $file . "\n";
27902790
$output .= " Require valid-user \n";
27912791
$output .= " Options +Indexes \n";

0 commit comments

Comments
 (0)