Security Patch for YACS 6.6.1

This patch is aiming to protect your server against some PHP attacks.

Who should install this patch?

You are at risk if your both conditions are met:

register_globals is set to On in php.ini
PHP run-time allows for the inclusion of remote script acquired through HTTP

Servers visible only from within intranet boundaries are safe to these attacks.

How to install this patch?

This archive has been produced in emergency situation, and regular update procedures do not apply.

Instead, explode the archive and upload files to the server. This will replace all scripts that could suffer from remote attacks.

Files

Security patch for YACS 6.6.1 40,863 bytes, 716 downloads
Edited by Bernard on Aug. 29 2006
Zoom

1 file

Comments

Tof on Sep. 16 2006 edit · delete
The requested URL /yacs/files/article/1664/20060829_yacs_6_6_1_patch.zip was not found on this server.

Tof

1 comment