AN ANALYSIS OF THE SECURITY MODEL OF APACHE SUEXEC

WWW（World Wide Web） is the important platform for publishing information in the Internet. The attacks through WWW are increasing dramatically. The security of CGI is related to the Web host security. The three major security models for CGI are compared. After describing an attack of CGI program and analyzing the suEXEC security model in Apache, several vulnerabilities of the model are given. The countermeasures are also discussed and an improved security model for Apache SuEXEC is given.