| | |||||
| ||||||||
| Industry News Reporting and discussion of the latest news affecting the Internet industries. |
![]() |
| | LinkBack | Thread Tools |
| | THREAD STARTER #1 (permalink) | ||||
| Senior Member Join Date: Jan 2004
Posts: 1,187
![]() ![]() ![]() | |
| Quote: |
|
Warning, a security hole was recently found in AWStats versions from 5.0 to 6.2 when AWStats is used as a CGI: A remote user can execute arbitrary commands on your server using permissions of your web server user (in most cases user "nobody"). If you use AWStats with another version or with option AllowToUpdateStatsFromBrowser to 0, you are safe. If not, it is highly recommended to update to 6.3 version that fix this security hole. |
| | #2 (permalink) |
| Senior Member Join Date: Dec 2004
Posts: 1,304
![]() ![]() ![]() ![]() ![]() | I saw that phpbb.com was attacked yesterday, but at that time, they had not released any info on how and what had happened! Thanks for posting this info! Its too bad that had to happen to phpbb, but what I am wondering is why they would only run there comunity off one server. At the magnitude they run, you would think they would be on two servers atleast for reasons such as this! HMM.
__________________ You got no time for the messenger, got no regard for the thing that you don't understand, you got no fear of the underdog, that's why you will not survive! |
| |