Re:Alert: Backdoor placed in Piwik
by micheljansen on Tuesday November 27, 2012 @11:46AM
(#4837623)
Agreed, but that alone wouldn't be enough.
If you read into what the hack does on the forums [1], it actually downloads and installs a backdoor that can execute arbitrary commands on your server. Unless a new version explicitly looks for and removes those files, updating is not enough.
If you read into what the hack does on the forums [1], it actually downloads and installs a backdoor that can execute arbitrary commands on your server. Unless a new version explicitly looks for and removes those files, updating is not enough.
[1] http://forum.piwik.org/read.php?2,97666