[Cascavel-pm] Erro estranho no Perl v5.8.6
Sammuel de Souza
sammuel.souza em gmail.com
Quinta Agosto 4 15:18:50 PDT 2005
Fiz como vc falou
fiz um script menor para ver se resolvo o problema.
coloquei
use diagnostics;
Codigo
#!/usr/bin/perl
use diagnostics;
use CGI;
my $query = new CGI;
print $query->header;
$impr = `/bin/cat /usr/local/www/cgi-bin/aa.log`;
print "teste: $impr";
quando acesso via Internet explorer veja o httpd-error.log
Insecure $ENV{PATH} while running setuid at
/usr/local/www/cgi-bin/sam.cgi line 11 (#1)
(F) You can't use system(), exec(), or a piped open in a setuid or
setgid script if any of $ENV{PATH}, $ENV{IFS}, $ENV{CDPATH},
$ENV{ENV}, $ENV{BASH_ENV} or $ENV{TERM} are derived from data
supplied (or potentially supplied) by the user. The script must set
the path to a known value, using trustworthy data. See perlsec.
Uncaught exception from user code:
Insecure $ENV{PATH} while running setuid at /usr/local/www/cgi-bin/sam.cgi line 11.
at /usr/local/www/cgi-bin/sam.cgi line 11
Agora qnd digit via prompt veja
# ./sam.cgi
ele executa normal...
Server version: Apache/1.3.33 (Unix) PHP/5.0.4 mod_perl/1.29
o que esta acontecendo???
[]'s Douglas
-------------- Próxima Parte ----------
Um anexo em HTML foi limpo...
URL: http://mail.pm.org/pipermail/cascavel-pm/attachments/20050804/ccec513d/attachment.html
Mais detalhes sobre a lista de discussão Cascavel-pm