[EMAIL PROTECTED] Security Question

2008-05-21 Thread Chris Tracy
Hey all, Quick question about a vulnerability that was already fixed. I'm specifically talking about the mod_autoindex UTF-7 XSS vulnerability that is fixed in Apache 2.2.6. You can find it discussed under the Security Reports for Apache 2.2 ( http://httpd.apache.org/security/vulnerabilities_22.ht

[EMAIL PROTECTED] Security Question

2007-03-02 Thread Tom Ray [Lists]
This really isn't a Apache per se but I'm going to guess that many of you have dealt with this problem in the past and I could use some advice. I'm having issues with people trying to hack my box. They are coming in through php scripts on sites that have 777 directories. I've done a lot to make

Re: [EMAIL PROTECTED] security question

2006-01-26 Thread Sterpu Victor
Suexec dows all the job. The rights were wrong. Sterpu Victor wrote: How do I setup apache so that diffrent virtual hosts can't read one eachother files(using cgi's by example)? I know that there is a module that runs a diffrent instance of apache for every virtual host(each instance on a d

[EMAIL PROTECTED] security question

2006-01-26 Thread Sterpu Victor
How do I setup apache so that diffrent virtual hosts can't read one eachother files(using cgi's by example)? I know that there is a module that runs a diffrent instance of apache for every virtual host(each instance on a diffrent user). Does someoane recalls how is this module named? I tryed