Workaround for Potential Security Vulnerability on HFS+ Volumes

This Admin Modify Rule will provide a workaround to block any potential vulnerability in HFS+ volumes that would allow an attacker to access a files data fork or return the file listings from a web server running on Mac OS X. Thanks to Fletcher Sandbeck of Blue World for creating this rule.

• Open the 4D WebSTAR Admin Client and access DefaultSite.
• Open the Web Rewrite > Admin Modify Rules section.
• Create a new rule with the following properties:
         URL ends with "data" OR
         URL ends with "rsrc" OR
         URL contains ".ds_store"
         Change root path to ""
         Change URL path to "/"
         Continue with Rule "stop"
• Move the rule so it is first in the list and check the "Preprocess" checkbox.
• Click "Save" to save the rule.

This Admin Modify Rule should apply globally and protect every site
on the WebSTAR server.

• Purchase Now!
• Download Trial

International | Company | Contact 4D | Site Map | Privacy Policy | © 4D, Inc. 1995-2008 | Change font size: [A] [A] [A] | | 4D RSS Feeds