http://qa.mandrakesoft.com/show_bug.cgi?id=3449
[EMAIL PROTECTED] changed:
What |Removed |Added
----------------------------------------------------------------------------
Severity|normal |critical
------- Additional Comments From [EMAIL PROTECTED] 2003-03-20 10:13 -------
Okay my script runs, but I did not have to deinstall mod_perl, all I had to do
was to place my script into /var/www/cgi-bin instead of /var/www/perl directory
the configuration for these directories in apache causes the behaviour I had:-)
But I still have the problem, that apache shows me the plain source of the perl
scripts, when I place them in /var/www/perl/ and call it without it extension.
for example.
http://localhost/perl/apache2-mod_perl-testscript
I tried that with my script and the other ones that come with mandrake
(apache2-mod_perl-testscript.pl).
So this is definitely a security flaw in the configuration.
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
------- Reminder: -------
assigned_to: [EMAIL PROTECTED]
status: UNCONFIRMED
creation_date:
description:
I just tried to run the following script(maintenance.pl):
#!/usr/bin/perl
use CGI qw(:standard);
my $input= param('name');
print <<End_Page;
Content-type: text/html
<HTML>
<HEAD>
<TITLE>Testscript</TITLE>
</HEAD>
<BODY>
<BR>
<H1 align="center">Test</H1>
<HR>
<P>$input</P>
</BODY>
</HTML>
End_Page
1;
When I redirect my browser to the site, it stops due to an error:
[error] 15765: ModPerl::Registry: Undefined subroutine
&ModPerl::ROOT::ModPerl::Registry::var_www_perl_maintenance_2epl::param called
at /var/www/perl/maintenance.pl line 7.
If i comment--> my $input= param('name'); the page loads.
Same script runs on my FreeBSD machine.
So something is wrong here, but I have no clou what this is all about I have
these packages installed:
apache2-modules-2.0.44-11mdk
apache-conf-2.0.44-11mdk
apache2-2.0.44-11mdk
apache2-mod_perl-2.0.44_1.99_08-3mdk
apache2-mod_php-2.0.44_4.3.1-2mdk
apache2-common-2.0.44-11mdk
perl-GTK2-0.0.cvs.2003.03.04.1-2mdk
perl-URPM-0.81-13mdk
perl-FCGI-0.67-1mdk
perl-GTK-0.7008-26mdk
perl-GTK-GdkPixbuf-0.7008-26mdk
perl-HTML-Parser-3.27-1mdk
perl-URI-1.23-1mdk
perl-XML-Parser-2.31-6mdk
perl-XML-Twig-3.09-2mdk
perl-base-5.8.0-19mdk
perl-DBI-1.32-1mdk
perl-CGI-Minimal-1.09-2mdk
perl-MDK-Common-1.0.4-23mdk
perl-DateManip-5.40-4mdk
perl-GTK-GdkImlib-0.7008-26mdk
perl-HTML-Tagset-3.03-5mdk
perl-Locale-gettext-1.01-7mdk
perl-5.8.0-19mdk
perl-CGI-2.810-3mdk
Thanks for checking it out
