From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Apr 12 09:45:26 2005 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A4B9E16A4CE; Tue, 12 Apr 2005 09:45:26 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 787D143D1F; Tue, 12 Apr 2005 09:45:26 +0000 (GMT) (envelope-from flz@FreeBSD.org) Received: from freefall.freebsd.org (flz@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j3C9jQAW094405; Tue, 12 Apr 2005 09:45:26 GMT (envelope-from flz@freefall.freebsd.org) Received: (from flz@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j3C9jQXG094401; Tue, 12 Apr 2005 09:45:26 GMT (envelope-from flz) Date: Tue, 12 Apr 2005 09:45:26 GMT From: Florent Thoumie Message-Id: <200504120945.j3C9jQXG094401@freefall.freebsd.org> To: skywizard@time.net.my, flz@FreeBSD.org, freebsd-ports-bugs@FreeBSD.org Subject: Re: ports/25272: Using lang/eperl as cgi/nph binary executor can give anybody the ability to view the content of any file X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2005 09:45:26 -0000 Synopsis: Using lang/eperl as cgi/nph binary executor can give anybody the ability to view the content of any file State-Changed-From-To: open->feedback State-Changed-By: flz State-Changed-When: Tue Apr 12 09:44:38 GMT 2005 State-Changed-Why: Have you sent a problem report to the upstream developers too? I'm not sure that's FreeBSD specific. http://www.freebsd.org/cgi/query-pr.cgi?pr=25272