Lighttpd

$HTTPurl =~ "^/c/proxy.cgi" {
cgi.assign = ( ".pl" => "/usr/bin/perl",
".cgi" => "/usr/bin/perl" )
}

usually it works like a charme http://www.rackit.de/dns.html
but at a sudden point lighty does not execute the cgi anymore and
DELIVERS the program-file itself!!! i would even call this a security
issue since that way its logical possible, that an attacker may get
program-code which includes information - maybe even database
connectivity accounts. however, at THIS particular cgi i have no real
sensitive information included, but i have not a good feeling to know
that lighty does programs as-is at some point...

anyone has observed something similar?

ofcourse debug mode is enabled but there are no errors! if it happens
you got only an entry in the access_log enlists usual delivering of a
file as-is.

anyone?

Simon

-- simonlange