[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Gnumed-devel] reborn

From: David Grant
Subject: Re: [Gnumed-devel] reborn
Date: Tue, 30 Nov 2004 00:29:50 -0800
User-agent: Mozilla Thunderbird 0.9 (X11/20041122)

Sebastian Hilbert wrote:

On Monday 29 November 2004 08:27, David Grant wrote:
Today ran an article on CCC (chaos computer club) having been hacked via twiki by some spanisch hackers. CCC has a reputation for being pretty smart guys.

This hack was possible because of an unknown twiki exploit.

It's all the same exploit I believe. But as far as I knew, as long as apache was being run with proper permissions, then it is harmless. I noticed it around the same time that was hacked, on the site as a security announcement. Apparently it may have been fixed in a twiki version as early as September 2, 2004, if I am correct...because it doesn't require a patch, but all previous versions do. Also, the fact that hey issued a new release the day after September 1st, means it must have gotten noticed just after release or something. But somehow it didn't get picked up by the security alert channel until much later: I guess it was seen as a minor security threat until recently.


David J. Grant

Attachment: david.grant.vcf
Description: Vcard

reply via email to

[Prev in Thread] Current Thread [Next in Thread]