From: Peter Dimov (pdimov_at_[hidden])
Date: 2004-12-22 09:13:35
Cory Nelson wrote:
> On Wed, 22 Dec 2004 15:36:48 +0300, Vladimir Prus <ghost_at_[hidden]>
>> Joaqu?n M? L?pez Mu?oz wrote:
>>> Please take a look at
>> Looks related to this:
>> 1. Boost does not use phpBB, AFAICT.
>> 2. I'm not sure if it used PHP at all.
> Sourceforge hosts multiple sites - it only takes one of them having a
> vulnerable phpBB to give access to all the others. This is a big
> problem :/
Granting write access to httpd isn't a good idea.
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk