Re: Re[2]: Hijacking Apache 2 via mod_perl

From: Steve G (linux_4ever_at_yahoo.com)
Date: 01/22/04

  • Next message: Christopher E. Cramer: "Re: Paper announcement: Is finding security holes a good idea?" 
    Date: Thu, 22 Jan 2004 09:51:10 -0800 (PST)
To: 3APA3A <3APA3A@SECURITY.NNOV.RU>, Ben Laurie <ben@algroup.co.uk>

    >At least, it's possible to store descriptors table and
    >implement check for descriptor in every perl file/socket
    >function inside mod_perl (and mod_php and mod_something) and
    >only allow access to std descriptors and to descriptors open
    >inside same script. The choice is between speed and security.

    Right. To me, that sounds ideal. In these days of 3 GHz machines,
    I don't mind a little extra checking if it makes things more
    secure.

    -Steve Grubb

    __________________________________
    Do you Yahoo!?
    Yahoo! SiteBuilder - Free web site building tool. Try it!
    http://webhosting.yahoo.com/ps/sb/

  • Next message: Christopher E. Cramer: "Re: Paper announcement: Is finding security holes a good idea?"