On Fri, Jun 27, 2003 at 05:02:03PM -0700, Gary Allen wrote: > Defacement of Web sites is probably more a matter of Web server > software, but there are still architectural and account issues at > hand. Good point though. I've only done a little bit of work in this > area, so I'm really interested in the group's responses.
Yeah, I tend to agree. Web defacements do not necessarily mean that the machine has been rooted. It may just mean that there are poor CGI scripts on the server that allow an external entity to overwrite an index.html page. On most systems nowadays you don't need to have root, or even shell, access to cause a defacement. -- Sam Phillips <[EMAIL PROTECTED]> http://www.dasbistro.com Reno Nevada _______________________________________________ RLUG mailing list [EMAIL PROTECTED] http://www.rlug.org/mailman/listinfo/rlug
