Gossamer Forum: Products: Gossamer Mail: Discussion: Isn't this a Security Threat? (anup123)

The *.def files have 666 permission by setup. Now this would mean that a client hosted on the same server as the webmail would just have to do a cat /path_to_def_files and see the database name and password.

Then the same client can connect to Mysql database and play destructively with it wipe off all the tables in a flash.....Correct me if I am wrong.

Isn't this insecure? How to make sure that such a happening is made impossible..... why do the def files and the def directory have to be world readable?

Anup

Subject	Author	Views	Date
Isn't this a Security Threat?	anup123	11009	May 3, 2003, 9:37 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10748	May 4, 2003, 8:21 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10769	May 4, 2003, 10:02 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10713	May 4, 2003, 10:11 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10722	May 4, 2003, 10:48 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10729	May 4, 2003, 10:52 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10743	May 4, 2003, 10:59 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10717	May 4, 2003, 11:01 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10733	May 4, 2003, 11:13 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10759	May 4, 2003, 11:23 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	11067	May 4, 2003, 11:31 AM

Re: [Chaz] Isn't this a Security Threat?	Paul	10725	May 4, 2003, 11:58 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	10695	May 4, 2003, 12:04 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	10761	May 4, 2003, 12:32 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	10736	May 4, 2003, 12:44 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6485	May 4, 2003, 1:55 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	6463	May 4, 2003, 2:08 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6549	May 4, 2003, 2:30 PM

Re: [Paul] Isn't this a Security Threat?	anup123	10679	May 4, 2003, 11:44 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10724	May 4, 2003, 11:57 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10724	May 4, 2003, 12:33 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10730	May 4, 2003, 12:37 PM

Post deleted by anup123	anup123	6447	May 4, 2003, 1:44 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6448	May 4, 2003, 1:48 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10703	May 4, 2003, 11:32 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10680	May 4, 2003, 11:55 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10701	May 4, 2003, 12:01 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	10696	May 4, 2003, 12:18 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10769	May 4, 2003, 12:35 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6504	May 4, 2003, 1:06 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6456	May 4, 2003, 1:54 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	6459	May 4, 2003, 3:26 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6405	May 4, 2003, 3:36 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6438	May 4, 2003, 4:41 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6444	May 4, 2003, 5:01 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6483	May 4, 2003, 1:56 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6425	May 4, 2003, 2:21 PM

Re: [anup123] Isn't this a Security Threat?	pugdog	6445	May 5, 2003, 4:47 AM

Re: [pugdog] Isn't this a Security Threat?	anup123	6442	May 5, 2003, 5:30 AM

Re: [anup123] Isn't this a Security Threat?	Paul	6398	May 5, 2003, 7:01 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10721	May 4, 2003, 10:55 AM

Re: [anup123] Isn't this a Security Threat?	Alex	6436	May 5, 2003, 12:01 PM

Subject

Author

Views

Date