By Michael S. Mimoso
Dan Crowley, a tech support engineer at Core Security Technologies Inc., presented several means of bypassing these protections in the Windows versions of four Web servers: Nginx, Cherokee, Mongoose and LightTPD. The most glaring is through the use of 8.3 aliases in Windows. These aliases are DOS-compatible aliases created every time a file is created in Windows. Both file names can be accessed, even though they aren't the same.