Gossamer Forum: Products: Gossamer Mail: Discussion: Isn't this a Security Threat? (anup123)

The *.def files have 666 permission by setup. Now this would mean that a client hosted on the same server as the webmail would just have to do a cat /path_to_def_files and see the database name and password.

Then the same client can connect to Mysql database and play destructively with it wipe off all the tables in a flash.....Correct me if I am wrong.

Isn't this insecure? How to make sure that such a happening is made impossible..... why do the def files and the def directory have to be world readable?

Anup

Subject	Author	Views	Date
Isn't this a Security Threat?	anup123	11137	May 3, 2003, 9:37 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10875	May 4, 2003, 8:21 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10897	May 4, 2003, 10:02 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10842	May 4, 2003, 10:11 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10849	May 4, 2003, 10:48 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10857	May 4, 2003, 10:52 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10870	May 4, 2003, 10:59 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10846	May 4, 2003, 11:01 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10860	May 4, 2003, 11:13 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10886	May 4, 2003, 11:23 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	11195	May 4, 2003, 11:31 AM

Re: [Chaz] Isn't this a Security Threat?	Paul	10854	May 4, 2003, 11:58 AM

Re: [Paul] Isn't this a Security Threat?	Chaz	10822	May 4, 2003, 12:04 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	10888	May 4, 2003, 12:32 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	10864	May 4, 2003, 12:44 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6596	May 4, 2003, 1:55 PM

Re: [Paul] Isn't this a Security Threat?	Chaz	6574	May 4, 2003, 2:08 PM

Re: [Chaz] Isn't this a Security Threat?	Paul	6663	May 4, 2003, 2:30 PM

Re: [Paul] Isn't this a Security Threat?	anup123	10807	May 4, 2003, 11:44 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10851	May 4, 2003, 11:57 AM

Re: [Paul] Isn't this a Security Threat?	anup123	10852	May 4, 2003, 12:33 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10858	May 4, 2003, 12:37 PM

Post deleted by anup123	anup123	6559	May 4, 2003, 1:44 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6559	May 4, 2003, 1:48 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	10830	May 4, 2003, 11:32 AM

Re: [Chaz] Isn't this a Security Threat?	anup123	10808	May 4, 2003, 11:55 AM

Re: [anup123] Isn't this a Security Threat?	Chaz	10829	May 4, 2003, 12:01 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	10823	May 4, 2003, 12:18 PM

Re: [anup123] Isn't this a Security Threat?	Paul	10896	May 4, 2003, 12:35 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6615	May 4, 2003, 1:06 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6567	May 4, 2003, 1:54 PM

Re: [Chaz] Isn't this a Security Threat?	anup123	6571	May 4, 2003, 3:26 PM

Re: [anup123] Isn't this a Security Threat?	Chaz	6516	May 4, 2003, 3:36 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6550	May 4, 2003, 4:41 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6556	May 4, 2003, 5:01 PM

Re: [anup123] Isn't this a Security Threat?	Paul	6595	May 4, 2003, 1:56 PM

Re: [Paul] Isn't this a Security Threat?	anup123	6536	May 4, 2003, 2:21 PM

Re: [anup123] Isn't this a Security Threat?	pugdog	6557	May 5, 2003, 4:47 AM

Re: [pugdog] Isn't this a Security Threat?	anup123	6554	May 5, 2003, 5:30 AM

Re: [anup123] Isn't this a Security Threat?	Paul	6509	May 5, 2003, 7:01 AM

Re: [anup123] Isn't this a Security Threat?	Paul	10849	May 4, 2003, 10:55 AM

Re: [anup123] Isn't this a Security Threat?	Alex	6548	May 5, 2003, 12:01 PM

Subject

Author

Views

Date