Re: [cobalt-security] SSI Vuln on cobalt

[Craig St George <craig@xxxxxxxxxxxxx>]

I found I could turn of exc option but then you get the problem with the
htaccess allowoveride all on frontpage sites as they can just turn it back 
on in there




At 01:18 PM 22/4/02, you wrote:
> That does not fix the hole!
>
>
> At 03:24 PM 4/21/2002, you wrote:
> > On Sunday 21 April 2002 05:06 pm, Brett Wright wrote:
> > > >Hi list
> > > >
> > > >
> > > >SSI pages run as the web user... so if I made a page "iseethis.shtml" 
> > with
> > > >the source: