Apache suEXEC privilege elevation / information disclosure
Discovered by Kingcope/Aug 2013
The suEXEC feature provides Apache users the ability to run CGI and SSI programs
under user IDs different from the user ID of the calling web server.
Write the PHP security policy and read the PHP Security Policy. PHP was initially called PersonalHomePage. later, as PHP became a very popular scripting language, its name also changed, it is called ProfessionalHyperTextPreProcessor. Using PHP4.2 as
Write PHP security policies. PHP was initially called PersonalHomePage. later, as PHP became a very popular scripting language, its name also changed, which is called plusionalhypertextpreprocessor. PHP with PHP4.2 was initially called the Personal
PHP was originally called the Personal Home Page. Later, as PHP became a very popular scripting language, its name also changed, called Professional HyperText PreProcessor. For example, PHP4.2 supports Apache, Microsoft Internet information Sereve,
PHP was originally called the personal home page. Later, as PHP became a very popular scripting language, its name also changed, called professional Hypertext Preprocessor. For example, php4.2 supports Apache, Microsoft Internet Information sereve,
Comments: Attackers use some methods to make the server refuse to respond to http, which causes Apache to greatly increase the demand for system resources (CPU time and memory), resulting in system slowdown or even complete paralysis of HTTP DoS
Apache Operating mechanism Analysis:1. b/S Interactive processInteractive procedures for browsers (BROWSER) and servers (WEB server):1. The browser makes an HTTP request to the server (request).2, the server receives the browser request data, after
PHP security practices that system administrators must know
PHP is an open source server-side scripting language that is widely used. The Apache Web server provides this convenience: access to files and content via HTTP or HTTPS protocol. Improperly
26 PHP security practices that the architect must knowPHP is an open source server-side scripting language that is widely used. The Apache Web server provides this convenience: access to files and content via HTTP or HTTPS protocol. Improperly
The security practice of PHP, which must be known by system administrators, is an open source server scripting language and widely used. The Apacheweb server provides the convenience of accessing files and content through HTTP or HTTPS. Improper
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.