[2972] in WWW Security List Archive
Re: 'phf' cgi-bin attack
daemon@ATHENA.MIT.EDU (KPJ)
Wed Sep 18 05:24:44 1996
To: simon@satobsys.co.uk
cc: www-security@ns2.rutgers.edu
In-reply-to: Your message of "Tue, 17 Sep 1996 13:23:28 -0000."
<9609171223.AA01861@satobsys.co.uk>
Date: Wed, 18 Sep 1996 08:57:03 +0200
From: KPJ <kpj@sics.se>
Errors-To: owner-www-security@ns2.rutgers.edu
simon@satobsys.co.uk wrote:
|Hmmm - phf seems part of standard setup, yet I've no idea what it
|does. Here's the result of "strings phf" - rather bizarre...
``phf'' is the handler for stuff like this:
<URL:http://hoohoo.ncsa.uiuc.edu/htbin/phf>