On Wed, 2002-01-16 at 22:59, Richard Gordon wrote: > At 10:55 PM -0500 1/16/02, Ben Parker wrote: > >If you manage to install Webware from FTP or SCP access only, you can always > >use popen() from within a servlet to execute any command as if you were in a > >shell. > > That's interesting as I would have thought (and hoped) that you would > at least have to figure out a way to change to a privileged user id > before you could start issuing system commands. Don't servlets run as > user Nobody just like cgi? >
They run as whatever you start the AppServer as. See: http://webware.colorstudy.net/twiki/bin/view/Webware/RunningWebwareAsUserWebware for more. Ian _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss
