101 reputation
1
bio website
location District of Columbia
age 33
visits member for 4 years
seen Dec 4 '13 at 19:15

Dec
20
comment Giving other users write access to apache logs can result in root exploit - How does this work?
The question is about mechanism used in a specific attack. I don't think that he's asking about the privileges of a script executed by Apache. It sounds like granting write access to Apache's log directory can compromise the Apache's user, and the question was "How does this work?". I'd be curious to know too. Does Apache blindly execute scripts in the logs folder (I doubt it)? What does Apache do with material written to the log folder that could enable an attacker to compromise Apache's user?
Dec
20
awarded  Supporter