Security implications of execute perms on cmd.exe

Post support questions that relate to the Windows 2003/2000/XP operating systems.

Moderators: Developers, Moderators

Post Reply
eddyboy
Posts: 1
Joined: Sun Jun 12, 2005 11:25 am

Security implications of execute perms on cmd.exe

Post by eddyboy »

Hi,

I've just installed Cacti, and i'm very impressed, however i don't like the idea of allowing the internet guest account execute permissions on cmd.exe. I realise this is an issue with the functions within PHP itself, but this certainly raises concerns over security.

Does anyone here think this is an issue? or am i just being paranoid? :)

Thanks.
User avatar
BSOD2600
Cacti Moderator
Posts: 12171
Joined: Sat May 08, 2004 12:44 pm
Location: USA

Post by BSOD2600 »

Yes, it's a big security issue.

I've created a seperate user account, which is used for the cacti portion of my website. IUSR has no rights on my cmd.exe but my cacti user does.
Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests