[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Malicious user can get the raq down



Hi all,

A few days ago, one of our Raq's went down. Problem: one of our users with
only CGI support has ran a Perl script with an infinite loop in it:

$count = 1;
while ($count < $TMP) {
    push(@TMPRec,$count*2);
}

Does anyone have an idea how to stop this, so that a simple user isn't able
to get a raq down? Of course, without disabling CGI support?

Greats,

Martin Waltmans
Isaeus Solutions --> Netherlands