131,000 web sites Sites Scramble To Fix Web Portal Security Bug
A security flaw in a popular Web portal system could enable attackers to completely compromise a site and is actively being exploited by Web page defacers, security experts warned. The bug in all current versions of PHP-Nuke allows unauthorized users to copy files to and from the server hosting the program, according to an advisory from a hacking group known as TWLC.
A search at Google.com revealed that approximately 131,000 Web sites use PHP-Nuke, a free, open-source software program that runs on Linux as well as Windows and other operating system platforms. Among the sites deploying PHP-Nuke is Privacy.org, a joint project of the Electronic Privacy Information Center (EPIC) and Privacy International...
By Brian McWilliams, Newsbytes
The Privacy.org site was not reachable today. Officials at EPIC and its hosting firm, Two Radical Technologies, were not immediately available for comment.
Similarly, Cccure.org, a PHP-Nuke site for individuals studying for certification by the International Information System Security Certification Consortium, was not functioning earlier today.
Another high-profile PHP-Nuke user, GWbush.com, a site that parodies U.S. president George W. Bush, disabled its PHP-Nuke system today after learning of the vulnerability.
Click here to continue reading this article at NewsBytes.com.
