[cgiwrap-users] a potential security problem
Brought to you by:
nneul
From: Jiang, H. D. (Harry) <hd...@lu...> - 2002-05-29 01:44:36
|
All, I wonder if cgiwrap have security problem?? If web server owner's password is known by malicious guys, he can setup a user call root and put some malicous program on web server , then he can access and execute these program as root from web . because cgiwrap does not check the unix password for web user . Is it a potential security problem? harry |