After several rounds of beta releases for 1.05 - the final version
has now been released.
Here is a list of fixes for this release:
- Fixed Error Page Cross-Site Scripting vulnerability
(http://www.secunia.com)
- Fixed FTP problem where you couldn't change to valid lower level
directories
- Fixed FTP Denial of Service security hole related to RETR
- Fixed FTP Denial of Service security hole in Windows9x
- Fixed problem with not sending pages when the IfModifiedTime was
in the future
- Changed the way MIME types are populated (now from Registry +
well known set)
- Now send REQUEST_URI in CGI environment
- Fixed sending PATH_INFO to PHP requests
- Improve identification of PHP, CGI, Perl, DLL's, etc. scripts
- Fixed a problem with SSI "FLASTMOD" directive
- Added trailing / to directory names in directory listing
- Added a couple more default MIME types (.ogg, etc.)
- Sending files via TransmitFile rather than chunking it myself
- Fix RemoteAdmin functionality
- Fixed hole in realm security
There are two known issues that have not yet been addressed. They
are:
- Incompatibility with PHP 4.3.2 (use 4.3.1)
- Denial of Service security hole in Windows9x (Win95 and Win98)
You can get the latest version from
http://www.brswebweaver.com
-Blaine