From owner-freebsd-questions Mon Dec 10 7:41:15 2001 Delivered-To: freebsd-questions@freebsd.org Received: from clmboh1-smtp3.columbus.rr.com (clmboh1-smtp3.columbus.rr.com [65.24.0.112]) by hub.freebsd.org (Postfix) with ESMTP id 648F537B41B for ; Mon, 10 Dec 2001 07:41:12 -0800 (PST) Received: from potentialtech.com (dhcp065-024-023-038.columbus.rr.com [65.24.23.38]) by clmboh1-smtp3.columbus.rr.com (8.11.2/8.11.2) with ESMTP id fBAFae926037; Mon, 10 Dec 2001 10:36:40 -0500 (EST) Message-ID: <3C14D833.2030407@potentialtech.com> Date: Mon, 10 Dec 2001 10:43:47 -0500 From: Bill Moran Organization: Potential Technology User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:0.9.3) Gecko/20010914 X-Accept-Language: en-us MIME-Version: 1.0 To: ann kok Cc: freebsd-questions@FreeBSD.ORG Subject: Re: cgi-bin References: <20011210152401.45175.qmail@web20107.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I think you may be on the wrong list for this question but ... ann kok wrote: > Hi all > > Is there any danger to put the *.exe in the cgi-bin > directory? Yes, there's plenty of danger. If you put an executable or binary in a cgi-bin directory so that it's executed when a visiter tries to call it up as a web page, then any errors, exploits, etc will be available to anyone surfing to your web site. The level of possible danger is based entirely on what program you put in that directory. People do it all the time, but with a properly written program and proper system permissions, it's not a problem. Probably, if you have to ask such a question, then you're not in a position to evaluate the possible dangers. However ... if what you're saying is that you're putting a Windows executable in the cgi-bin directory of a FreeBSD server, then there really isn't any danger to the FreeBSD server, since it can't execute Windows executables. -- Bill Moran Potential Technology http://www.potentialtech.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message