bugtraq - Re: Re: Back door trojan in acajoom-3.2.6 for joomla

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 23 Jul 2009 16:02:30 -0400
From: Jeffrey Walton <noloader@...il.com>
To: "chris.boergermann@...erko.de" <chris.boergermann@...erko.de>
Cc: bugtraq@...urityfocus.com
Subject: Re: Re: Back door trojan in acajoom-3.2.6 for joomla

> ... or the developers were stupid enough to develop with old code.
Stupid may be a bit harsh. I find 'Software Security' is also a frame
of mind that *must* be backed by education. Perhaps the developers
lack the knowledge they need to model the threats and incorporate a
secure architecture.

Jeff

- Hide quoted text -

On 7/23/09, chris.boergermann@...erko.de <chris.boergermann@...erko.de> wrote:
> An early release of 4.0.0 has the same problem!
>
> So Acajoom has a general security issue or the developers
> were stupid enough to develop with old code.
>