ifratric

Right, on Linux, for the scenarios described in the advisory, you'd need to have a trailing space in a file/folder name.

But if you just so happen to run nginx on Windows, you can loose the trailing space requirement as any file is accessible with a space at the end. Also in "/foo /../protected/file" scenario, foo doesn't need to exist.