Front Page form_results

From: Pentium Cowboy (omicrom808at_private)
Date: Mon Aug 23 1999 - 17:08:21 PDT

Next message: vendicatorat_private: "Stack Shield: defending from "stack smashing" attacks"

Previous message: Ben Pfaff: "Re: Insecure use of file in /tmp by trn"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

For pages created with front page, the default location for form results is
in     /_private/form_results.txt   the default is also set to no security.
Many pages created out of templates, or by inexperienced users will leave a
page this way, and the form results can be simply obtained by going to
www.(domain name).com/_private/form_results.txt

A no-brainer, but a security hole none the less

Next message: vendicatorat_private: "Stack Shield: defending from "stack smashing" attacks"
Previous message: Ben Pfaff: "Re: Insecure use of file in /tmp by trn"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:58:57 PDT