ports/25272: Using lang/eperl as cgi/nph binary executor can give anybody the ability to view the content of any file
Sam Lawrance
lawrance at FreeBSD.org
Sun Apr 17 14:57:07 UTC 2005
Synopsis: Using lang/eperl as cgi/nph binary executor can give anybody the ability to view the content of any file
State-Changed-From-To: feedback->closed
State-Changed-By: lawrance
State-Changed-When: Sun Apr 17 14:55:12 GMT 2005
State-Changed-Why:
The problem described is not specific to FreeBSD. A warning has
been added to pkg-message describing the consequences of using
eperl in CGI mode.
http://www.freebsd.org/cgi/query-pr.cgi?pr=25272
More information about the freebsd-ports-bugs
mailing list