From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM
	autolearn=unavailable autolearn_force=no version=3.4.4
Path: 
 eternal-september.org!reader01.eternal-september.org!reader02.eternal-september.org!news.eternal-september.org!news.eternal-september.org!news.eternal-september.org!feeder.eternal-september.org!aioe.org!.POSTED!not-for-mail
From: =?utf-8?Q?Yannick_Duch=C3=AAne_=28Hibou57?=
 =?utf-8?Q?=29?=
 <yannick_duchene@yahoo.fr>
Newsgroups: comp.lang.ada
Subject: Re: Web Development Using Ada?
Date: Sun, 28 Jul 2013 07:10:19 +0200
Organization: Ada @ Home
Message-ID: <op.w0w1zhgxule2fv@cardamome>
References: <874bf843-8212-44a4-b0c6-e20d831325bc@googlegroups.com>
 <kt119m$hln$2@dont-email.me> <kt21mn$osm$1@loke.gir.dk>
NNTP-Posting-Host: ds8m8HfAx594C0h4s/JFyA.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes
Content-Transfer-Encoding: Quoted-Printable
X-Complaints-To: abuse@aioe.org
User-Agent: Opera Mail/12.16 (Linux)
X-Notice: Filtered by postfilter v. 0.8.2
Xref: news.eternal-september.org comp.lang.ada:16568
Date: 2013-07-28T07:10:19+02:00
List-Id: <comp.lang.ada>

Le Sun, 28 Jul 2013 05:03:51 +0200, Randy Brukardt <randy@rrsoftware.com=
>  =

a =C3=A9crit:
> OTOH, if you execute a shell, if an attacker can find a way to pass
> information to that shell, they might be able to do anything. Apache h=
as
> fixed many such bugs. It's better if there are no shell outs. It's eve=
n
> better if the capability to do shell outs isn't even in the code (sinc=
e  =

> some
> attacks require executing existing code in unusual ways - if the proce=
ss
> doesn't have any code that can shell out, such attacks can't shell out=

> either).

What's =E2=80=9Cshell out=E2=80=9D in this context? A server or anything=
 responding to a  =

request, has no reasons to have any connexions to the shell.

-- =

=E2=80=9CSyntactic sugar causes cancer of the semi-colons.=E2=80=9D [1]
=E2=80=9CStructured Programming supports the law of the excluded muddle.=
=E2=80=9D [1]
[1]: Epigrams on Programming =E2=80=94 Alan J. =E2=80=94 P. Yale Univers=
ity