Fox News leaks secret files

FOX NEWS has been telling the world+dog about its doings thanks to an insecure web server.

Insecurity experts found a gaping security hole in Fox News Network Web site which revealed file directories and sensitive content.

Several directories were visible on a server for Fox News that should normally not be accessible by a Web browser over the Internet. According to Ronald van den Heetkamp, who runs the blog "The Hacker Webzine" a systems administrator may have forgotten that the directories were viewable over the Internet or erroneously changed the permissions needed to view the directories.

Also exposed was an FTP (File Transfer Protocol) connection to ziffdavis.com and a username and a password in a bash file.

While van den Heetkamp said that while it would be hard to do a direct exploit on the Fox News web server, he would not mind betting that hackers were having a look at the site's structure for future attacks.

Fox has since gone to earth, closed the hole and is not saying anything about it.

More here. µ