note 62254 deleted from ref.exec by nlopess
| From: | nlopess@php.net | Date: | Thu, 23 Feb 2006 18:27:15 +0000 |
| Subject: | note 62254 deleted from ref.exec by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-104320@lists.php.net to get a copy of this message | ||
Note Submitter: cp at sandon dot it
----
About cmd.exe permissions: *DON'T* give permission to read/execute it to the IUSR_ users.
You will just make your web server more vulnerable. Microsoft removed permissions
to improve security. Some exploits used cmd.exe to perform whatever command they
liked.