Re: [Full-disclosure] Medium security hole in Varnish reverse proxy

2010-03-30 Thread Tim Brown
On Monday 29 March 2010 18:12:38 John Adams wrote: Post some code that people can evaluate. I don't really like posting PoC code, but consider: param.set user root stop start vcl.inline test backend default { .host = \127.0.0.1\; .port = \8080\; } C{ #include aheaderfile.h }C sub vcl_recv {

Re: [Full-disclosure] Medium security hole in Varnish reverse proxy

2010-03-29 Thread John Adams
Post some code that people can evaluate. For starters, There's no reason why varnish ever has to run as root. It never listens on privileged ports, and the C compiler is never available over a network interface. You can ask varnish to reload a configuration and recompile it, but you'd have to