in reply to Re^4: Patch an old Perl version
in thread Patch an old Perl version
The attack is real and proven.
First: prove it!
But, even if that does happen, to what consequence?
The instance of perl running the cgi script in response to the attacker's request, self terminates. Meaning the attack is over.
The web-server continues to run; new instances of perl are run to handle everyone else's requests.
The total damage done is EXACTLY ZERO. Nada. Zilch.
No DoS; No DDos; No affect on other users; nor the web-site; nor anything permanent.
The attacker's session end's immediately. Big deal?
|
---|
Replies are listed 'Best First'. | |
---|---|
Re^6: Patch an old Perl version
by demerphq (Chancellor) on Nov 15, 2013 at 12:12 UTC | |
by BrowserUk (Patriarch) on Nov 15, 2013 at 14:58 UTC |