Re: [webmin-l] Webmin Doesn't Clean ENV

[<pg...@ne...>]

 Please remove me from all webmin/webadmin mailing lists. Thank you
 
-----Original Message-----
From: Jamie Cameron <jca...@we...>
To: web...@li...
Sent: Fri, 26 May 2006 13:48:12 -0500 (CDT)
Subject: Re: [webmin-l] Webmin Doesn't Clean ENV


On 26/May/2006 12:15 Agustin Pizarro wrote ..
> Hi All,
> 
> I have been searching the web  because I have that problem (see subject)
> with 
> version 1.260
> 
> Even if this http://seclists.org/lists/bugtraq/2001/May/0258.html says
> it has 
> been fixed on 0.83 when I restart my Apache server I can see webmin SID
> with 
> PHP phpinfo() function which may be a serious security problem as it says
> here: http://seclists.org/lists/bugtraq/2001/May/0275.html
> 
> Has this been fixed?
> 
> How do I get ENV cleaned when restarting Apache with webmin?
> 
> I am using the miniserv.pl server.

Does this still happen if you stop and re-start Apache from within
Webmin? I am pretty sure this problem is fixed by clearing all environment
variables before calling Apache, although if you just do a restart or apply
changes Apache may still be inheriting variables from a previous incorrect
version of Webmin.

Also, are you using Virtualmin there? It has its own slightly different Apache
restart code.

 - Jamie



-------------------------------------------------------
All the advantages of Linux Managed Hosting--Without the Cost and Risk!
Fully trained technicians. The highest number of Red Hat certifications in
the hosting industry. Fanatical Support. Click to learn more
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642
-
Forwarded by the Webmin mailing list at web...@li...
To remove yourself from this list, go to
http://lists.sourceforge.net/lists/listinfo/webadmin-list
___________________________________________________
Try the New Netscape Mail Today!
Virtually Spam-Free | More Storage | Import Your Contact List
http://mail.netscape.com