Off-Topic Mambo Vulnerabilities & Patches

[ivazquez at ivazquez.net (Ignacio Vazquez-Abrams)]

On Tue, 2006-02-28 at 05:06 -0800, Jim Smith wrote:
> On the Mambo CMS site there are vulnerabilities found. Whilst this is
> not a CentOS problem, people rent/deploy servers (CentOS) on the net
> with Mambo. A guy in one of the user forums on the net, had his Mambo
> 4.5.2 server hacked and they installed some interesting stuff in /tmp
> . When a server is hacked it gives bad PR for the underlying OS.

If you value security and you don't know how to program in PHP then
you'll avoid Mambo entirely. I was astounded by some of the poor
decisions made by the Mambo team in writing it.

> <----announcement on http://www.mamboserver.com/----->

> If you are running an earlier version of Mambo than 4.5.3 we
> recommend that you consider upgrading.