Newsgroups: fj.unix
Path: galaxy.trc.rwcp.or.jp!news.trc!nf2.iij.ad.jp!nr0.iij.ad.jp!news.iij.ad.jp!rim.or.jp!Q.T.Honey!tamaru-news!kuee-news!odins-suita!nuis!news.cc.nagoya-u.ac.jp!nfeed.gw.nagoya-u.ac.jp!vega2!arisawa
From: arisawa@vega2.aichi-u.ac.jp (Kenji Arisawa)
Subject: Re: cgi security
Sender: news@vega2.aichi-u.ac.jp (News Master)
Message-ID: <Erx55z.5H0@vega2.aichi-u.ac.jp>
Date: Fri, 24 Apr 1998 12:53:59 GMT
References: <ErwM8F.2FF@vega2.aichi-u.ac.jp>
Nntp-Posting-Host: vega2
Organization: Aichi University Computer Center, Aichi University, Aichi, Japan.
X-Newsreader: mnews [version 1.18PL3+] 1994-08/01(Mon)
Lines: 31
Xref: galaxy.trc.rwcp.or.jp fj.unix:7894
X-originally-archived-at: http://galaxy.rwcp.or.jp/text/cgi-bin/newsarticle2?ng=fj.unix&nb=7894&hd=a
X-reformat-date: Mon, 18 Oct 2004 15:18:22 +0900
X-reformat-comment: Tabs were expanded into 4 column tabstops by the Galaxy's archiver. See http://katsu.watanabe.name/ancientfj/galaxy-format.html for more info.

$BM-_7(B@$B0&CNBg3X$G$9(B

$B<+8J%U%)%m!<$G$9!#(B
apache 1.1 $B$N(BCGI $B$G(B root$BFC8"$,40A4$K;&$5$l$F$$$k$+%A%'%C%/$7$F8+$^$7$?!#(B
$B4JC1$J%W%m%0%i%`$G$9!#(B

int main(void){
        int ruid, euid;
        puts("Content-type: text/plain");
        puts("");
        puts("CGI SECURITY TEST");
        printf("ruid=%d  euid=%d\n", getuid(), geteuid());
}

$B7k2L$O(B
CGI SECURITY TEST
uid=-2  euid=-2
$B$G$9!#$3$N7k2L$r8+$k8B$j!"40A4$K;&$5$l$F$$$^$9$M!#(B
$B=>$C$F!"(B
>1. apache $B$O(B root$B8"8B$G5/F0$5$l$F$$$^$9$,!"$:$C$H(B root $B8"8B$G<B9T$5$l$?(B
>$B$^$^$J$N$G$7$g$&$+(B?
>2. $B$b$7$b(B root $B8"8B$G<B9T$5$lB3$1$F$$$k$N$G$"$l$P!"$3$l$rJQ99$G$-$J$$(B
>$B$b$N$G$7$g$&$+(B?
>3. $BEvLL$N0B0W$JJ}K!$J$N$G$9$,!"(Bcgi $B%U%!%$%k$r2M6u$N%f!<%6$K(B setuid $B$9$k(B
>$B$H8@$&%"%$%G%"$O2?$+LdBj$,H/@8$7$=$&$G$7$g$&$+(B?
$B$NItJ,$OLdBj$K$7$J$/$F$b9=$$$^$;$s!#(B
$B$=$l$K$7$F$b!"(Bphf $B$r;H$C$?<j8}$r8+$k$H!"(Broot $BFC8"$rI,MW$H$9$k%3%^%s%I$r(B
$B<B9T$7$h$&$H$7$F$$$^$9!#2?$+B>$K<j$,$+$j$,$"$k$N$+$I$&$+(B?

$BM-_77r<#(B
E-mail@aichi-u.ac.jp
