CERT mailing list archives

Current Activity - OpenX Releases Security Update


From: Current Activity <us-cert () us-cert gov>
Date: Thu, 23 Sep 2010 13:38:25 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

US-CERT Current Activity

OpenX Releases Security Update

Original release date: September 23, 2010 at 12:19 pm
Last revised: September 23, 2010 at 12:19 pm


OpenX has released a security update to address a vulnerability in the
2.8 downloadable version of OpenX. Exploitation of this vulnerability
may allow an attacker to compromise the integrity of the server
running OpenX.

US-CERT encourages users and administrators to review the OpenX
"Security Update" blog entry and upgrade to OpenX 6.8.7 to help
mitigate the risks. OpenX users are also encouraged to review the "How
to Secure your OpenX Installation" blog entry on how to further secure
the OpenX installation.

Relevant Url(s):
<http://blog.openx.org/09/security-update/>

<http://blog.openx.org/09/security-update-how-to-secure-your-openx-installation/>

====
This entry is available at
http://www.us-cert.gov/current/index.html#openx_releases_security_update

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBTJuQgT6pPKYJORa3AQLPSgf+NlWmY56qLOluo4ABXpAeFUq1m4QFD8tA
sZhrJon8HLp5KzlHpqrwx6O34raCKBWGX2o4Zz3nZiptySYjQOWnz0doUFmhA8yF
QRaDUXPt1ClHahGLVe+CYL1X0RrX3896zWaOKtYtpenVUJgFN6JW9vmKFpbkxzF8
1PPf4SJCkiSC4pQBPwboN/kapgvg9vBwdeTk/nnb38oNm6Hbc1vhFdvI1G+Oi+g0
9IDzHoGENcX/ph8iDvRR7gnlrpuW9hQVencFmS+JkG3EqXuAO1/XqO8+Ng6Xig2g
9raUmLTODU5yPKzu0KJO4KqDRb1dE39vWNp1Xc+6i++GwbObrEeCIg==
=xoo2
-----END PGP SIGNATURE-----


Current thread: