On Sat, 23 Jun 2001, KAMRY wrote:

> But can't they have privileges to the httpd demon and probably do some stuff
> on that demon.
> 
> Kal
> 

I don't recall Apache having any control system or any interactive session
or whatever that can be controlled from the outside... but now that you
mentioned it, I do think of a problem that may accour.

Someone who played more than me on this is welcome to tell what this CGI
script will do:

#!/bin/sh
killall -9 httpd

indeed looks serious to me, even with CGIwrap (as you can do exec from SSI
as well.) - ideas, anyone?

- shimi

_______________________________________________
cobalt-developers mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-developers

Reply via email to