K
knocx
Guest
it is possible to traverse and read whole server files with perl/cgi scripts even using plesk suexec.
i.e one can read /etc/proftpd.conf ..etc you guess the rest!
is there a pre-caution for that? how can perl be hardened on run time (like php safe_mode directive).
or is the only way to disable perl handler in apache
i.e one can read /etc/proftpd.conf ..etc you guess the rest!
is there a pre-caution for that? how can perl be hardened on run time (like php safe_mode directive).
or is the only way to disable perl handler in apache