[pkg-lighttpd] Bug#499334: Bug#499334: lighttpd: CGI scripts only work for remoteip "127.0.0.1"

Pierre Habouzit madcoder at debian.org
Sun Oct 5 08:35:27 UTC 2008


On Sat, Oct 04, 2008 at 02:33:08AM +0000, Rodrigo Campos wrote:
> Package: lighttpd
> Version: 1.4.19-5
> Followup-For: Bug #499334
> 
> The fix allows CGI execution only from localhost. If you enabled cgi module you
> probably don't want it to work only from localhost.
> 
> The Apache package also enables it for "anybody"

which is a rather bad idea for many CGI scripts. plus it's a snipplet
example that is meant to be modified.

-- 
·O·  Pierre Habouzit
··O                                                madcoder at debian.org
OOO                                                http://www.madism.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/pkg-lighttpd-maintainers/attachments/20081005/8bd96d2c/attachment.pgp 


More information about the pkg-lighttpd-maintainers mailing list