start CGI within a CGI ???

start CGI within a CGI ???

Post by Simon Sch?fe » Sat, 15 Jan 2000 04:00:00


My CGI-Scripts are in C and I need to start a CGI named dtsort.cgi
within the CGI dtread.cgi. It works just fine on the shell, but not via
the browser window (Apache 1.3.9). I used the 'system' function in C to
start dtsort.cgi. Guess Apache restricts it.

The problem is that I HAVE to start dtsort.cgi with parameters in the
form 'dtsort.cgi name1 name2' etc. Since the system-function didn't
work, I modified dtread.cgi to send another form back to the browser
with  FORM TYPE= "dtsort.cgi name1 name2" , but that didn't work either,

Apache cuts off after 'dtsort.cgi' and submits no parameters. Is there
some way to make one either one (I don't care which one) of these work,
or to tell Apache to accept the procedure ? Thanks for all replies in

Simon Schaefer


1. /cgi-bin/phf /cgi-bin/test-cgi /cgi-bin/handler

I've been seeing a number of attacks of this sort recently
from various sites in the http logs.  The time correlation
between the logs on various hosts suggests that the attacker
was scanning sequentially upward in IP addresses.  Since all
tcp and udp packets to ports below 1024 except for http,
smtp, and ident are filtered out for most, including the
attacking, sites, I'm not seeing anything else in the logs. - - [04/Jul/1998:07:19:27 -0500] "GET /cgi-bin/phf" 404 - - - [04/Jul/1998:07:19:28 -0500] "GET /cgi-bin/test-cgi" 404 - - - [04/Jul/1998:07:19:28 -0500] "GET /cgi-bin/handler" 404 -

Is this a signature of some known attackware?  If so, what
other attacks accompany these http probes?


2. Multiple Harddisks

3. - cgi within cgi?

4. Automatic proxy configuration

5. cgi program which is a daemon/starting daemon from cgi

6. "conf:2 missing module argument" at boot time

7. starting daemon from cgi/cgi process that is a daemon

8. Advice for DAT-Streamer needed

9. Apache/CGI: How to toggle an ErrorDocument from a CGI ?

10. announce: cgi++ v2.0: a c++ library for cgi script handling

11. cgi.gif or cgi.jpg

12. cgi-bin and cgi file security

13. CGI won't execute - cgi pointing into htdocs directory