Am 08.10.2012 20:12, schrieb Joe Zeff:
> On 10/08/2012 11:08 AM, Tom Horsley wrote:
>> Anyone have any clue what is causing this to happen?
>> I can't imagine this is something that would be desirable
>> behavior :-).
> 
> What are the permissions on the file?

apache/php is not interesed at all in execute-flags

this is widely known and caused by the "MultiViews" option
and can also lead to execute PHP if images contain code
and saved with .php.gif

you can simply add php-code at the end of a image without
break image display - this is a know exploit vector for
uploaded images

Options -MultiViews

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Reply via email to