[SlugBug] Oops.

David Leadbeater slugbug at dgl.cx
Sun Jul 25 21:29:37 BST 2004


Neil McGovern wrote:
> Looks like someone has messed up:
> http://btmgr.sourceforge.net/index.php3?body=../../../../../../usr/local/apache/conf/httpd.conf
> 
> Got a worrying reply back from sourceforge, basically saying "we don't
> care"

That doesn't surprise me, sourceforge's security isn't known to be
very good ;)

Anyway, with the amount of people who have access to those boxes (just
about anyone with a sourceforge account and a project), they are
probably more worried about local security.




More information about the SlugBug mailing list