>So, did the hacked hosts have ftp daemons
>running, with the firewall allowing outside
>access? Telnet? Rsh? Or are there html
>specific inherent weaknesses (even without
>java etc)?
Yes. It's called cgi-bin.
(to mention just one of the many inherent httpd problems.... and cgi is my
favourite to pick on)
____________________________________________________________________
Margaret H. McMahan - Systems Engineer
pmcmahan @
v-one .
com
"Know your faults, know your friends,
Be prepared to take revenge"
|
|
