Re: Pretty mammoth security issue with safe_mode_exec
| From: | Stanislav Malyshev | Date: | Mon, 08 Jan 2001 16:44:33 +0000 |
| Subject: | Re: Pretty mammoth security issue with safe_mode_exec | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-43400@lists.php.net to get a copy of this message | ||
AW>> If you have safe mode enabled, and have a safe mode exec directory, here's
AW>> how you can execute binarys outside of your safe mode exec directory!
Do you have real code that can do this? Can you post it (with your
settings)? I don't see even how ".." check is useful with current code
that just chops off the path in the safe mode.
--
Stanislav Malyshev, Zend Products Engineer
stas@zend.com http://www.zend.com/ +972-3-6139665 ext.115