Question: (a) Below is a short POST-method CGI script - it reads a line of the form field-name=value from standard input, and then executes the last

 (a) Below is a short POST-method CGI script - it reads

(a) Below is a short POST-method CGI script - it reads a line of the form field-name=value" from standard input, and then executes the last command (in the line $result = 'last ...') to see if the user name "value has logged in recently. Describe how to construct an input that executes an arbitrary command with the privileges of the script. Explain how your input will cause the program to execute your command, and suggest how the code could be changed to avoid the problem. #!/usr/bin/perl print "content-type: text/html "; ($field_name, $username_to_look_for) = split(/=/, ); chomp $username_to_look_for; $result = 'last -1000 i grep $username_to_look_for'; if ($result) { print "$username_to_look_for has logged in recently. "; } else { print "$username_to_look_for has NOT logged in recently. "; print "

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!