Perl threat

K

knocx

Guest
it is possible to traverse and read whole server files with perl/cgi scripts even using plesk suexec.

i.e one can read /etc/proftpd.conf ..etc you guess the rest!


is there a pre-caution for that? how can perl be hardened on run time (like php safe_mode directive).

or is the only way to disable perl handler in apache
 
Back
Top