(security) Adobe gifts internal file permissions to unwashed masses | The Register
http://www.theregister.co.uk/2007/09/27/adobe_website_leak/
Amazing... :-) It seems they didn't even set the permissions right on their SSL private key file, and a "directory traversal" bug allowed pretty much anyone to get this key out, as the screenshot shows!
No comments:
Post a Comment