Re: Bug in Apache 1.3.20 Server - Hackemate Research

From: Grant Kaufmann (grantsec@netizen.co.za)
Date: 09/24/01


Message-ID: <00f201c14481$093b5d80$e201080a@noodle>
From: "Grant Kaufmann" <grantsec@netizen.co.za>
To: <bugtraq@securityfocus.com>
Subject: Re: Bug in Apache 1.3.20 Server - Hackemate Research
Date: Sun, 23 Sep 2001 18:42:30 -0400


> This bug (?) affects: Apache/1.3.20 Server
This is a PHP issue and its not a bug.
This is the temporary session data for currently existing sessions. The files should be
owned by the www user and mode 600. If you don't like the data being stored there, feel
free to set the session_save_path variable in PHP >=4.0.0.

--
Grant



Relevant Pages