[cobalt-users] RE: (old) Raq cgi-bin Security Hole

["Stefan" <epostfach@xxxxxxxx>]

I saw this message here form the list archiv

and i played a bit with our RaQ4i Server. Thats

NOT correct on my box - it looks maybe that the

server where it works isnt right configure´d?

 

All what i get if i try to download a cgi file - is

the HTML code only. The cgi code is hidden and

nobody can download it from http://...

 

Greetings,

Stefan

 

On Tue, 05 Mar 2002, tolgaraq wrote:
> When I use getright and enter url of any file in
> cgi-bin getright succesfuly downloads it. And your cgi
> files is open to anyone who knows it's file name.
>
> Anyone know how to prevent it?

That's one of the reasons all my CGIs are chmod 711,
I know everyone likes to use 755, and that's what you get anyone can read them.

--
Gerald Waugh

__________________________________________________________________________
Die sicherste Form der Kommunikation: E-Mails verschluesseln, Spam-Filter,
Adressverifizierung, digitale Unterschrift: http://freemail.web.de