You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2011/07/24 15:12:13 UTC

DO NOT REPLY [Bug 51547] New: Enable Options +IncludesNOEXEC but still can run #exec cgi

https://issues.apache.org/bugzilla/show_bug.cgi?id=51547

             Bug #: 51547
           Summary: Enable Options +IncludesNOEXEC but still can run #exec
                    cgi
           Product: Apache httpd-2
           Version: 2.2.19
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: All
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: natong@gmail.com
    Classification: Unclassified


<Directory "/">
    Options +ExecCGI +FollowSymLinks -Includes +IncludesNOEXEC +Indexes
-MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
</Directory>

With above setting, I can run #exec cgi. Very strange!

---------------------------------------------------------------------

<Directory "/">
    Options +ExecCGI +FollowSymLinks +Includes -IncludesNOEXEC +Indexes
-MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
</Directory>

With above setting, I can't run any server-side includes. 

---------------------------------------------------------------------

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 51547] Enable Options +IncludesNOEXEC but still can run #exec cgi

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51547

--- Comment #1 from Natong <na...@gmail.com> 2011-07-24 13:18:19 UTC ---
Sorry, please ignore 1st post.

-----------------------------------------------------

<Directory "/">
    Options +ExecCGI +FollowSymLinks +Includes +IncludesNOEXEC +Indexes
-MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
</Directory>

With above setting, I can run #exec cgi. Very strange!

-----------------------------------------------------

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 51547] Enable Options +IncludesNOEXEC but still can run #exec cgi

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51547

--- Comment #3 from Natong <na...@gmail.com> 2011-07-25 05:44:55 UTC ---
<Directory "/">
    Options +ExecCGI +FollowSymLinks +Includes -IncludesNOEXEC +Indexes
-MultiViews +SymLinksIfOwnerMatch
    AllowOverride All
</Directory>


I forgot to tell. When setting like above, I can't run #cgi cmd. Very Strange.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 51547] Enable Options +IncludesNOEXEC but still can run #exec cgi

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51547

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID

--- Comment #2 from Eric Covener <co...@gmail.com> 2011-07-24 15:50:38 UTC ---
+IncludesNoExec doesn't "subtract from" your +Includes in the same context.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org