Gossamer Forum: Products: Gossamer Mail: Discussion: Isn't this a Security Threat? (anup123)

The *.def files have 666 permission by setup. Now this would mean that a client hosted on the same server as the webmail would just have to do a cat /path_to_def_files and see the database name and password.

Then the same client can connect to Mysql database and play destructively with it wipe off all the tables in a flash.....Correct me if I am wrong.

Isn't this insecure? How to make sure that such a happening is made impossible..... why do the def files and the def directory have to be world readable?

Anup

Subject	Author	Views	Date
Isn't this a Security Threat?	anup123	10987	May 3, 2003, 9:37 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10727	May 4, 2003, 8:21 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10748	May 4, 2003, 10:02 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10692	May 4, 2003, 10:11 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10701	May 4, 2003, 10:48 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10708	May 4, 2003, 10:52 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10722	May 4, 2003, 10:59 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10696	May 4, 2003, 11:01 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10712	May 4, 2003, 11:13 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10738	May 4, 2003, 11:23 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	11046	May 4, 2003, 11:31 AM

Re: [Chaz] Isn't this a Security Threat?	Paul	10704	May 4, 2003, 11:58 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	10674	May 4, 2003, 12:04 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	10740	May 4, 2003, 12:32 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	10715	May 4, 2003, 12:44 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6476	May 4, 2003, 1:55 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	6454	May 4, 2003, 2:08 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6540	May 4, 2003, 2:30 PM

Re: [Paul] Isn't this a Security Threat?	anup123	10658	May 4, 2003, 11:44 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10703	May 4, 2003, 11:57 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10703	May 4, 2003, 12:33 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10709	May 4, 2003, 12:37 PM

Post deleted by anup123	anup123	6438	May 4, 2003, 1:44 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6439	May 4, 2003, 1:48 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10682	May 4, 2003, 11:32 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10659	May 4, 2003, 11:55 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10680	May 4, 2003, 12:01 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	10675	May 4, 2003, 12:18 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10748	May 4, 2003, 12:35 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6495	May 4, 2003, 1:06 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6447	May 4, 2003, 1:54 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	6450	May 4, 2003, 3:26 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6396	May 4, 2003, 3:36 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6429	May 4, 2003, 4:41 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6435	May 4, 2003, 5:01 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6474	May 4, 2003, 1:56 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6416	May 4, 2003, 2:21 PM

Re: [anup123] Isn't this a Security Threat?	pugdog	6436	May 5, 2003, 4:47 AM

Re: [pugdog] Isn't this a Security Threat?	anup123	6433	May 5, 2003, 5:30 AM

Re: [anup123] Isn't this a Security Threat?	Paul	6389	May 5, 2003, 7:01 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10700	May 4, 2003, 10:55 AM

Re: [anup123] Isn't this a Security Threat?	Alex	6427	May 5, 2003, 12:01 PM

Subject

Author

Views

Date