[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Telnet Script



Hello,

> We never got an answer from Cobalt on this one, except "interesting".
> Running this script http://www.rohitab.com/cgiscripts/cgitelnet.html  on a
> virtual site, you can walk all the way up the directory to root.  View
files
> that you should not see, even if telnet is turned off on the Raq.
>
> Anyone no a way to stop users from using a script like this?

File permissions. Have a look at:

http://list.cobalt.com/pipermail/cobalt-users/2002-March/066367.html
and
http://list.cobalt.com/pipermail/cobalt-users/2002-March/066425.html

--
Regards,
Jonathan Michaelson
Commercial CGI Scripting, Web Hosting
Web-based Email, Homepage Creation and Live Help products
http://www.webumake.com