Re: [PLUG] godaddy, imunify, gimp

[Martin Cracauer via plug <plug@lists.phillylinux.org>]

jeffv via plug wrote on Tue, Nov 23, 2021 at 10:55:26AM -0500: 
> 
> Imunify360 Bug Leaves Linux Web Servers Open to Code Execution, Takeover
> 
> https://threatpost.com/linux-web-servers-imunify360-bug/176508/
>
> A high-severity security vulnerability in CloudLinux???s Imunify360 
> cybersecurity platform could lead to arbitrary code execution and 
> web-server takeover, according to researchers.

Hmmm, okay.  "Security software" usually increases the attack surface
and can be questioned just based on that.

But those folks implemented it in PHP of all things?

Martin
-- 
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Martin Cracauer <cracauer@cons.org>   http://www.cons.org/cracauer/
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug