|
關(guān)注:1
2013-05-23 12:21
求翻譯:One of the main sources of vulnerabilities in traditional CGI stems from the fact that the programs are often executed by general-purpose operating system shells. So, the CGI programmer must be careful to filter out characters such as backquotes and semicolons that are treated specially by the shell. Implementing this 是什么意思?![]() ![]() One of the main sources of vulnerabilities in traditional CGI stems from the fact that the programs are often executed by general-purpose operating system shells. So, the CGI programmer must be careful to filter out characters such as backquotes and semicolons that are treated specially by the shell. Implementing this
問題補(bǔ)充: |
|
2013-05-23 12:21:38
在傳統(tǒng)的CGI漏洞的主要來源之一,源于方案往往是由通用操作系統(tǒng)外殼執(zhí)行。因此,CGI程序員必須小心過濾掉,例如被視為由外殼專門的反引號和分號字符。實(shí)施這一預(yù)防措施比人們想象的更難,這個問題產(chǎn)生的弱點(diǎn)不斷被廣泛使用的CGI庫中發(fā)現(xiàn)的。
|
|
2013-05-23 12:23:18
的一個主要來源,傳統(tǒng)安全漏洞來源于這樣一個事實(shí):cgi程序通常是由一般用途的操作系統(tǒng)外殼。 因此,在cgi程序員必須要謹(jǐn)慎,過濾器和分號字符(例如backquotes特別對待的空殼。 這一注意事項(xiàng)實(shí)施比一個或許會想,和弱點(diǎn)而產(chǎn)生這一問題正在不斷得到廣泛使用cgi庫中發(fā)現(xiàn)。
|
|
2013-05-23 12:24:58
其中一個弱點(diǎn)的主要來源在傳統(tǒng)CGI源于事實(shí)節(jié)目由通用操作系統(tǒng)的殼經(jīng)常執(zhí)行。 如此, CGI程序員一定小心過濾%E
|
|
2013-05-23 12:26:38
在傳統(tǒng)的 CGI 漏洞的主要來源之一源自程序常常會執(zhí)行由通用操作系統(tǒng)外殼的事實(shí)。所以,CGI 程序員必須小心篩選出字符如要和專門治療外殼的分號。實(shí)施這一預(yù)防措施是比人們可能會認(rèn)為,和產(chǎn)生此問題的弱點(diǎn)不斷被揭穿了廣泛使用 CGI 庫中的難。
|
|
2013-05-23 12:28:18
|
湖北省互聯(lián)網(wǎng)違法和不良信息舉報平臺 | 網(wǎng)上有害信息舉報專區(qū) | 電信詐騙舉報專區(qū) | 涉歷史虛無主義有害信息舉報專區(qū) | 涉企侵權(quán)舉報專區(qū)