[Chameleon] Twiki vulnerability

[Daniel Morissette]

Hi,

If you are running Twiki on any of your servers then please read this:

We've found that Twiki has a vulnerability and that's how maptools.org 
has been compromised last week (and another bunch of attempts made since 
we brought the server back up). This is a very serious threats and lots 
of sites seem to have been attacked in the last few days so I would 
encourage anyone with Twiki on their server to take it down until they 
install a patch. For more details: 
http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithSearchHackReports

You could also search your Apache logs for the string "__BEGIN__" to 
find out if your server may have been attacked/compromised already.

Daniel

P.S. This also explains why the Chameleon Twiki on maptools.org is 
currently unavailable.
-- 
------------------------------------------------------------
  Daniel Morissette               dmorissette at dmsolutions.ca
  DM Solutions Group              http://www.dmsolutions.ca/
------------------------------------------------------------