Re: BIND exploited ?

2002-01-04 Thread Andy Bastien
On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > On Fri, 4 Jan 2002 17:54, Andy Bastien wrote: > > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > > > >  Where do I go from here ? > > > > > > Buy new hard

Re: BIND exploited ?

2002-01-04 Thread Andy Bastien
On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > On Fri, 4 Jan 2002 17:54, Andy Bastien wrote: > > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > > > >  Where do I go from here ? > > > > > > Buy new har

Re: BIND exploited ?

2002-01-04 Thread Russell Coker
On Fri, 4 Jan 2002 17:54, Andy Bastien wrote: > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > > >  Where do I go from here ? > > > > Buy new hard drives, install them and install the latest version of your > > favourite distr

Re: BIND exploited ?

2002-01-04 Thread Russell Coker
On Fri, 4 Jan 2002 17:54, Andy Bastien wrote: > On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > > >  Where do I go from here ? > > > > Buy new hard drives, install them and install the latest version of your > > favourite dist

Re: BIND exploited ?

2002-01-04 Thread Andy Bastien
On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > >  Where do I go from here ? > > Buy new hard drives, install them and install the latest version of your > favourite distribution and configure it in a secure fashion. Make sure

Re: BIND exploited ?

2002-01-04 Thread Russell Coker
On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: >  Where do I go from here ? Buy new hard drives, install them and install the latest version of your favourite distribution and configure it in a secure fashion. Make sure that all passwords are different. Trying to remove root-kits etc might be f

Re: BIND exploited ?

2002-01-04 Thread Andy Bastien
On Fri Jan 04, a day that will live in infamy, Russell Coker wrote: > On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: > >  Where do I go from here ? > > Buy new hard drives, install them and install the latest version of your > favourite distribution and configure it in a secure fashion. Make sur

Re: BIND exploited ?

2002-01-04 Thread Russell Coker
On Fri, 4 Jan 2002 03:16, Thedore Knab wrote: >  Where do I go from here ? Buy new hard drives, install them and install the latest version of your favourite distribution and configure it in a secure fashion. Make sure that all passwords are different. Trying to remove root-kits etc might be

Re: Apache cgi-bin for users

2002-01-04 Thread Marcel Hicking
Go for CGIWrap. > CGIWrap is a gateway program that allows general users to > use CGIscripts and HTML forms without compromising the > security of the http server. Scripts are run with the > permissions of the user who owns the script. In addition, > several security checks are performed on the sc

Re: Apache cgi-bin for users

2002-01-04 Thread Marcel Hicking
OK, several things on this subject. "Addhandler cgi-script .cgi .pl" (1) and ScriptAlias (2) are two different concepts for allowing binaries to be executed. Approach 1 will allow the execution of binaries based on their extension (.cgi and .pl here) regardless of where they are found. That inclu

Re: Apache cgi-bin for users

2002-01-04 Thread Marcel Hicking
Go for CGIWrap. > CGIWrap is a gateway program that allows general users to > use CGIscripts and HTML forms without compromising the > security of the http server. Scripts are run with the > permissions of the user who owns the script. In addition, > several security checks are performed on the s

Re: Apache cgi-bin for users

2002-01-04 Thread Marcel Hicking
OK, several things on this subject. "Addhandler cgi-script .cgi .pl" (1) and ScriptAlias (2) are two different concepts for allowing binaries to be executed. Approach 1 will allow the execution of binaries based on their extension (.cgi and .pl here) regardless of where they are found. That incl

Re: Apache cgi-bin for users

2002-01-04 Thread Michael Wood
On Thu, Jan 03, 2002 at 04:36:19PM -0500, Keith Elder wrote: [snip] > http://yourdomain.com/~username/cgi-bin/test.cgi > > When this page is run, I get "premature end of headers" in the > error.log file. I thought this would be fairly simple but it > is turning out to be a headache. [snip] Just