Re: [cobalt-users] Raq3 && PHP4.0.4pl1 => BIG SECURITY HOLE

[Glen Scott <glen@xxxxxxxxxxxxxxxxxxxx>]

> Hi there,
>
> Some of our customers started complaining lately about the fact that onces
> they uploaded files through PHP and used the "move_uploaded_file" function
> of php the rights of the uploaded file would look like this.
>
> -rw-------   1 httpd    root           66 Sep 13 15:53
> /home/sites/home/web/tmp/test.file
>
> Which is off course a huge security hole !!!

Why is this a security hole?  As far as I can see, the file can only 
be read and written to by the user 'httpd'.  Isn't the group in this 
case irrelevant?

Anyway, I can confirm that PHP4.0.6 sets the permissions for uploaded 
files in this way, too.

Regards,

Glen Scott

--
---
  Design Solution Limited
  t: +44 (0)1502 513008
  f: +44 (0)1502 588622
  e: info@xxxxxxxxxxxxxxxxxxxx
  w: http://www.designsolution.co.uk
  Nouvotech House, Harbour Road,
  Oulton Broad, Suffolk, NR32 3LZ, UK
---
DS Knowledge Base http://faq.dessol.co.uk