Linked by David Adams on Fri 25th Sep 2009 14:50 UTC, submitted by TommyCarlier
Privacy, Security, Encryption From Smashing Magazine: "A few months ago, Anton Isaykin, in collaboration with the company 2comrades, found a huge vulnerability that is quite typical of big projects (we do not name names here). To test it, they obtained the file structures and even the source code of about 3320 Russian websites and some major English-language websites. Serious vulnerabilities like this aren't supposed to exist nowadays. Every serious or visible exploit is found and fixed quickly. But here we will show you something simple and ordinary yet very dangerous."
Thread beginning with comment 386491
To read all comments associated with this story, please click here.
More of a problem in the default config
by CrLf on Sun 27th Sep 2009 11:29 UTC
CrLf
Member since:
2006-01-03

This not a vulnerability in subversion at all... But I guess it could be called a vulnerability in the default configuration for web servers, which should block access to files started with a ".".

Reply Score: 2