A Network Intrusion Detector's Look at Suspicious Events written by Richard Bejtlich, TaoSecurity. PDF Format HFX 1st issue of online e-zine. Every file that the webserver has access to, can be read by anyone.
Any user can execute arbitrary commands with the previleges of the web server.
Any malicious user would be able to run arbitrary files writable by the user running infobot. Tutorial on redirecting with back orifice Remote vulnerability in SSH daemon crc32 compensation attack detector Information regarding the use of SubSeven Trojan horse. 115 new vulnerabilities were reported this month. This document has links to more information and full advisories on each.