On Wed, 4 Mar 2009, Ricky Zhou wrote:

> Just to let everybody know, I confirmed a code execution vulnerability
> on our zabbix install, so I've taken it down until we can apply fixes
> for it:
>
> http://seclists.org/fulldisclosure/2009/Mar/0032.html
>

Thanks Ricky, I think it might be good for us to throw our zabbix install
behind http basic auth like what we've done for cacti just so someone
doesn't happen upon it in a vulnerable state.

        -Mike

_______________________________________________
Fedora-infrastructure-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-infrastructure-list

Reply via email to