2007-09-28

(security) Adobe gifts internal file permissions to unwashed masses | The Register

http://www.theregister.co.uk/2007/09/27/adobe_website_leak/

Amazing... :-) It seems they didn't even set the permissions right on their SSL private key file, and a "directory traversal" bug allowed pretty much anyone to get this key out, as the screenshot shows!

No comments: