Re: WebCatalog security on NT
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 27183
interpreted = N
texte = >Hi, > >I would like to suggest a customer to offer webcat, on their NT web >hosting systems. > >I have seen some posts from Ken, and I know that is the case on a >Mac, that somebody with upload capabilities, could possibly cause *a >lot* of trouble, deleting files, running applescripts, messing with >the TCPSend command, and so on > >The customer offers web hosting services, with virtual domains, on an NT box. > >Can webcat be told to run only in certain folders?No, that's the major problem preventing it from being a secure hosting tool. Webcat on NT can run DOS commands/scripts, so nothing is safe on NT, just like nothing is safe on Macintosh. Even without AppleScript/DOS contexts, webcat's ability to navigate the folder hierarchy with its standard features puts other sites in danger of being hacked quite easily.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to
.This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Associated Messages, from the most recent to the oldest:
>Hi, > >I would like to suggest a customer to offer webcat, on their NT web >hosting systems. > >I have seen some posts from Ken, and I know that is the case on a >Mac, that somebody with upload capabilities, could possibly cause *a >lot* of trouble, deleting files, running applescripts, messing with >the TCPSend command, and so on > >The customer offers web hosting services, with virtual domains, on an NT box. > >Can webcat be told to run only in certain folders?No, that's the major problem preventing it from being a secure hosting tool. Webcat on NT can run DOS commands/scripts, so nothing is safe on NT, just like nothing is safe on Macintosh. Even without AppleScript/DOS contexts, webcat's ability to navigate the folder hierarchy with its standard features puts other sites in danger of being hacked quite easily.================================ Kenneth Grome, WebDNA Consultant 808-737-6499, http://webdna.net ================================------------------------------------------------------------- Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server. To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to
Kenneth Grome
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
ShowNext (1997)
Authorize.net settings (2007)
emailer error -108 (1997)
[WebDNA] Can't see were it's wrong.... (2017)
Mac: [ListFiles] bug alert (1997)
Re(6): Small Bug: ErrorLog.txt/[FORMVARIABLES]/[ORDERFILE] (1998)
NT lockup cont'd (1998)
find with exceptions (1997)
WebCatalog Hosting (1996)
Emailer Set Up (1997)
problem with WebDNA Command (2004)
Fulfillment e-mail? (1998)
READFILE command? (1998)
WebCatalog as another user on mac osx (2001)
PSC recommends what date format yr 2000??? (1997)
[WebDNA] SEARCH question - SHOWIF - HIDEIF question (2011)
PDF on the fly - how to? (2005)
[sendmail] questions... (1997)
Plugin or CGI or both (1997)
Who is John Jakovich? (1999)