101 reputation
bio website
location District of Columbia
age 34
visits member for 4 years, 7 months
seen Dec 4 '13 at 19:15

comment Giving other users write access to apache logs can result in root exploit - How does this work?
The question is about mechanism used in a specific attack. I don't think that he's asking about the privileges of a script executed by Apache. It sounds like granting write access to Apache's log directory can compromise the Apache's user, and the question was "How does this work?". I'd be curious to know too. Does Apache blindly execute scripts in the logs folder (I doubt it)? What does Apache do with material written to the log folder that could enable an attacker to compromise Apache's user?
awarded  Supporter