[Previous] [Next] [Index] [Thread]

Re: NT Security (PERL)



On Sun, 19 May 1996, Enrico Cantu wrote:

> At 12:28 PM  +0000 5/17/96, Jason M. Feilbach wrote:
> >I have recently read about the lack of security on Microsoft and
> >Apple operating systems when using webserver software and have PERL
> >services enabled. I cannot however, find any solution to the problem
> >mentioned. Nor is their a workaround. The only solution is to disable
> >(remove) PERL (perl.exe) which is not viable as these services are
> >important. We have many NT (v3.51) servers running Netscape 1.13.

1. check out http://w4.lns.cornell.edu/~pvhp/perl/ntperl.htm

2. Some claim that you can use the FileManager to associate *.pl files
with the perl interpreter.  I cannot test this as I don't have access to
an NT server.

3. The official info from Netscape (which might be old news to you) is
that you should write wrapper programs which are .exe, not .bat since
there is another security hole accociated with .bat files. 

The above reference contains pointers to the Netscape info.

---
David Tauzell         Math Dept. Systems Staff
Office  Phone: 625-4895


References: