Re: Apache Vulnerability in WebTen

[Robert Brandtjen <rob@xxxxxxxxxxxxxxxxxxx>]

On Monday 24 June 2002 01:35 pm, you wrote:
> By "execute arbitrary code", we mean exactly that -- any code that a
> hacker thinks up can be executed.  So, in short, the answer to your
> question is "yes".

well, not exactly - you have to have the available binaries as well - the 
hacker ( not really a hacker, lets say script kiddie more likely) will think 
they are on a nix box and attempt to execute commands which don't exist in 
weten - it's not like he can access "root's" password or create an account, 
since there are no tools with which to do it. Even if he could, there are no 
tools such as telnet and SSH to allow further remote access.

Most he can do is toss the files, even then, I'm not sure he really can trash 
them.

Back the box up
-- 
 Robert Brandtjen
 --------------------------------------
 Web Site Creation and Hosting Services
 Hostmaster@xxxxxxxxxxxxxxxxxxx
 www.prometheusmedia.com