[Fedora-directory-commits] adminserver/admserv/cgi-ds addindex.c, 1.2, NONE ds_bak2db.c, 1.2, NONE ds_db2bak.c, 1.2, NONE ds_db2ldif.c, 1.2, NONE ds_ldif2db.c, 1.2, NONE ds_rmdb.c, 1.2, NONE vlvindex.c, 1.2, NONE

[Richard Allen Megginson (rmeggins)]

Author: rmeggins

Update of /cvs/dirsec/adminserver/admserv/cgi-ds
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv5290/adminserver/admserv/cgi-ds

Removed Files:
	addindex.c ds_bak2db.c ds_db2bak.c ds_db2ldif.c ds_ldif2db.c 
	ds_rmdb.c vlvindex.c 
Log Message:
Resolves: bug 186280
Bug Description: Close potential security vulnerabilities in CGI code
Reviewed by: nhosoi (Thanks!)
Fix Description: This is for the CGIs moved into adminserver from ds.  There is quite a bit of code here that we don't use anymore.  We can also get rid of Import.java and Export.java in the ds console code.  This addresses the security issues because, even though the console doesn't ever call the tasks that invoke the CGIs for db2ldif, ldif2db, etc. a malicious user could still attempt to invoke a task remotely and pass in bogus file and directory names.
Platforms tested: RHEL5 x86_64
Flag Day: no
Doc impact: no
QA impact: should be covered by regular nightly and manual testing
New Tests integrated into TET: none



--- addindex.c DELETED ---


--- ds_bak2db.c DELETED ---


--- ds_db2bak.c DELETED ---


--- ds_db2ldif.c DELETED ---


--- ds_ldif2db.c DELETED ---


--- ds_rmdb.c DELETED ---


--- vlvindex.c DELETED ---