[rt-users] Insecure dependency with FastCGI

Daniel A. Melo daniel at codata.com.br
Mon Nov 17 12:47:42 EST 2003


Change your Debian box to testing and run:

apt-get update;
apt-get dist-upgrade.


I have rt 3.0.6 running on a Debian Testing box.


[]'s


-- 
Daniel A. Melo
Consultor em Segurança da Tecnologia da Informação
MCSO - Modulo Certified Security Officer


Em Seg, 2003-11-17 às 11:10, Hanno Mueller escreveu:
> Hanno Mueller wrote:
> 
> > I'm trying to install RT on a Debian Stable box. Since Debian doesn't
> > come with Perl 5.8 yet, I compiled my own 5.8.2. It runs Apache 1.3.26
> > with FastCGI.
> > 
> > 
> > I followed all the installation instructions for RT.
> 
> [..]
> 
> > I'm a bit stuck and the mailing list doesn't mention this problem for
> > recent versions. Yet, I cannot use RT with mod_perl on this particular
> > server.
> > 
> > Any suggestions?
> 
> I also tried to run 3.0.7 RC1 on the same box, no luck. Again, Perl 
> complains about the mkdir() call.
> 
> I've tried to untaint the CGI variables, but actually, I don't want to 
> hunt for the symptom until I actually know the cause.
> 
> 
> Is anyone else running RT 3.0.6 as a CGI or as a FastCGI? I cannot 
> install mod_perl on this server, so any help is greatly appreciated.
> 
> Thanks,
> 
> Hanno
> 
> 
> _______________________________________________
> rt-users mailing list
> rt-users at lists.fsck.com
> http://lists.fsck.com/mailman/listinfo/rt-users
> 
> Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm





More information about the rt-users mailing list