Skip to main content
Information Security

Return to Question

Became Hot Network Question
Reword to improve focus.
Source Link
multithr3at3d
multithr3at3d
  • 13.2k
  • 3
  • 34
  • 45

Is it possible that a user can hack a server running apacheApache httpd from athe website it hosts? Let's say I have a PhpPHP web application running under Apache with explicit user www-data in the virtual host configuration. Even ifIf the user hacks the website, he haswould only have access to modify the phpPHP code then write some codes to access system files which can only be accessed with root user and user files which can, since he only be accessed with myUser user. Canhas the hacker take controlprivileges of the operating systemwww-data? user.

Note: I asked that question on Serverfault but someone suggest I ask in here. Could the attacker leverage this limited access to reach user or system files, effectively taking control of the operating system?

Is it possible that a user can hack a server running apache from a website? Let's say I have a Php web application running under Apache with explicit user www-data in the virtual host configuration. Even if the user hacks the website, he has access to modify the php code then write some codes to access system files which can only be accessed with root user and user files which can only be accessed with myUser user. Can the hacker take control of the operating system?

Note: I asked that question on Serverfault but someone suggest I ask in here.

Is it possible that a user can hack a server running Apache httpd from the website it hosts? Let's say I have a PHP web application running under Apache with explicit user www-data in the virtual host configuration. If the user hacks the website, he would only have access to modify the PHP code, since he only has the privileges of the www-data user.

Could the attacker leverage this limited access to reach user or system files, effectively taking control of the operating system?

added 5 characters in body
Source Link
schroeder ♦
schroeder ♦
  • 132.1k
  • 55
  • 307
  • 348

Is it posible thartpossible that a user can hack a server running apache from a website? Let's say I have a Php web application running under Apache with explicit user www-data in the virtual host configuration. Even if the user hackhacks the website, he has access to modify the php code then write some codes to access system files which can only be accessed with root user and user files which can only be accessed with myUser user. Can the hacker take control of the operating system?

Note: I asked that question on Serverfault but someone suggest I ask in here.

Is it posible thart a user hack a server running apache from a website? Let's say I have a Php web application running under Apache with explicit user www-data in the virtual host configuration. Even if the user hack the website, he has access to modify the php code then write some codes to access system files which can only be accessed with root user and user files which can only be accessed with myUser user. Can the hacker take control of the operating system?

Note: I asked that question on Serverfault but someone suggest I ask in here.

Is it possible that a user can hack a server running apache from a website? Let's say I have a Php web application running under Apache with explicit user www-data in the virtual host configuration. Even if the user hacks the website, he has access to modify the php code then write some codes to access system files which can only be accessed with root user and user files which can only be accessed with myUser user. Can the hacker take control of the operating system?

Note: I asked that question on Serverfault but someone suggest I ask in here.

Source Link
user3502626
user3502626
  • 123
  • 1
  • 4

Can a user hack a server running apache from a website

Is it posible thart a user hack a server running apache from a website? Let's say I have a Php web application running under Apache with explicit user www-data in the virtual host configuration. Even if the user hack the website, he has access to modify the php code then write some codes to access system files which can only be accessed with root user and user files which can only be accessed with myUser user. Can the hacker take control of the operating system?

Note: I asked that question on Serverfault but someone suggest I ask in here.