>Number: 1306 >Category: config >Synopsis: .cgi scripts still executed even when ExecCGI not present >Confidential: no >Severity: critical >Priority: medium >Responsible: apache >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Wed Oct 22 22:50:01 PDT 1997 >Last-Modified: >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2.4 >Environment: Linux prego 2.0.30 #20 Sat Sep 13 22:00:35 EDT 1997 i586 >Description: When .cgi scripts are enabled with "AddType application/x-httpd-cgi .cgi", or with "SetHandler cgi-script cgi" then CGI scripts are always executed, despite the setting of ExecCGI in the options (even if Options None is set!).
I hope I am not crying wolf, but this seems pretty bad. I will check on other systems. >How-To-Repeat: >Fix: >Audit-Trail: >Unformatted:
