in reply to CGI, application context and security

I don't use IIS or Windows, but I seem to recall that the default setup uses a low-privileged user account to run programs via CGI. That account probably cannot see all of the processes running on the system.

There are lots of potential solutions, including granting additional privileges to that account. That may have security implications, however.

  • Comment on Re: CGI, application context and security

Replies are listed 'Best First'.
Re^2: CGI, application context and security
by ady (Deacon) on Apr 07, 2007 at 20:06 UTC
    Yes, i agree that this must be a sec. issue. I've granted the internet guest/anon acct. and the NTLM accounts the nexessary read&exec rights to the cgi-bin folder with the programs in question, -- but the problem persists. Arrrgghh! Will sleep, and have a look at it tomorrow. Thanks! -- allan