[EHPweb] ehp2 - problem

[Martinez, Eric M.]

I've patched the DYFI form to close this loophole.

Thanks,
	~Eric.

On Aug 11, 2011, at 3:07 PM, Christopher J Bidwell wrote:

> I need to shut down apache on ehp2 for a bit.   
> 
> Looks like someone was able to get into /etc/ via a webform on DYFI. 
> 
> I will be checking ehp1,3, and 4 as well. 
> ----------------
> Thank you,
> 
> Chris Bidwell, RHCSA
> Red Hat Linux Administrator
> National Earthquake Information Center
> US Geological Survey
> email: cbidwell at usgs.gov
> work: 303-273-8642
> mobile: 303-435-6362
> _______________________________________________
> EHPweb mailing list
> EHPweb at geohazards.usgs.gov
> https://geohazards.usgs.gov/mailman/listinfo/ehpweb

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://geohazards.usgs.gov/pipermail/ehpweb/attachments/20110811/45d700e9/attachment.html>