OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Filipe Jorge Marques de Almeida (filipernl.ist.utl.pt)
Date: Sun Jun 23 2002 - 09:03:13 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Don't forget this is not a serious vulnerability in many configurations (if the
    user already has permission to run cgi scripts without suexec, SSI, etc).

    On Sat, Jun 22, 2002 at 09:27:48PM -0400, Michal Zalewski wrote:
    > Check out what you get - file descriptors and other goodies - and perhaps
    > it is a good time to cc: bugtraq or at least Apache guys?;-) 

    --
Filipe Almeida