From owner-freebsd-isp Tue Aug 20 13:35:11 1996 Return-Path: owner-isp Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id NAA01297 for isp-outgoing; Tue, 20 Aug 1996 13:35:11 -0700 (PDT) Received: from Gatekeeper.Lamb.net (root@Gatekeeper.Lamb.net [206.169.44.2]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id NAA01288 for ; Tue, 20 Aug 1996 13:35:07 -0700 (PDT) Received: (from ulf@localhost) by Gatekeeper.Lamb.net (8.7.5/8.7.3) id NAA22995 for freebsd-isp@FreeBSD.ORG; Tue, 20 Aug 1996 13:34:53 -0700 (PDT) From: Ulf Zimmermann Message-Id: <199608202034.NAA22995@Gatekeeper.Lamb.net> Subject: Re: Weird Apache problem To: freebsd-isp@FreeBSD.ORG Date: Tue, 20 Aug 1996 13:34:53 -0700 (PDT) In-Reply-To: from Dev Chanchani at "Aug 20, 96 02:33:55 pm" X-Mailer: ELM [version 2.4ME+ PL22 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-isp@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Hi. Speaking of weird problems. I was falling about a problem and I am not sure if I am too stupid :) or there is a bug. If it is a bug, I would put it into security bug bucket. I have the following access.conf: # This should be changed to whatever you set DocumentRoot to. Options Indexes IncludesNOEXEC FollowSymLinks order allow,deny allow from all As this shows I set IncludesNOEXEC, which should allow me to do Server Side Includes, but no CGI-BIN or external programs. Now I have here this webpage: Ulf's empty homepage I have no time to make something up here, but I would like to give you some links to memory specs:)

..... [Stuff deleted]




------ As you see I have 1 CGI, 1 external program and 1 ECHO. If I know access this via http://server/ulf/index.html, the server executes the ECHO and don't allow the CGI and external program. It gives a message like "An error occured while executing this directive" But now, if I access this page via http://server/~ulf/index.html it executes everything regardless of "Option IncludeNOEXEC". Has anyone seens this too? Open for everything. And yes you can call me stupid, if it is in the manual, but I couldn't find anything. I looked into the source code and I think it might be a bug. Ulf. :) --------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204 Lamb Art Internet Services || http://www.Lamb.net/