Spero che i backup notturni con "rotazione" di 3 giorni mi possano salvare....<br><br><div class="gmail_quote">2011/9/30 Yuri <span dir="ltr"><<a href="mailto:yurj@alfa.it" target="_blank">yurj@alfa.it</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Il 29/09/2011 19:14, Fabrizio Rota ha scritto:<div><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Mi ricorda tanto le scalate di privilegi delle altre volte........<br>
</blockquote>
<br></div>
Peggio, con questo esegui comandi come utente plone, come ad esempio cancellare tutto il contenuto delle directory dell'utente plone (e quindi l'istanza).<br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
2011/9/29 Yuri <<a href="mailto:yurj@alfa.it" target="_blank">yurj@alfa.it</a> <mailto:<a href="mailto:yurj@alfa.it" target="_blank">yurj@alfa.it</a>>><div><br>
<br>
oh, no, ancora! :-D<br>
<br>
-------- Messaggio originale --------<br>
Oggetto: [Plone-Users] Security Announcement: Severe<br>
Vulnerability - Patch Pre-Announcement<br>
Data: Wed, 28 Sep 2011 13:54:49 -0700<br></div>
Mittente: Steve McMahon <<a href="mailto:steve@dcn.org" target="_blank">steve@dcn.org</a> <mailto:<a href="mailto:steve@dcn.org" target="_blank">steve@dcn.org</a>>><br>
A: plone_users <<a href="mailto:plone-users@lists.sourceforge.net" target="_blank">plone-users@lists.<u></u>sourceforge.net</a><br>
<mailto:<a href="mailto:plone-users@lists.sourceforge.net" target="_blank">plone-users@lists.<u></u>sourceforge.net</a>>>, Plone Developers<br>
<<a href="mailto:plone-developers@lists.sourceforge.net" target="_blank">plone-developers@lists.<u></u>sourceforge.net</a><br>
<mailto:<a href="mailto:plone-developers@lists.sourceforge.net" target="_blank">plone-developers@<u></u>lists.sourceforge.net</a>>><div><br>
<br>
<br>
<br>
During a security audit conducted by a member of the Plone<br>
Security Team, a severe vulnerability was discovered in Zope<br>
2.12.x and Zope 2.13.x that allows execution of arbitrary code by<br>
anonymous users.<br>
*<br>
*The vulnerability affects Plone 4.0 (through 4.0.9); Plone 4.1;<br>
Plone 4.2 (a1 and a2); Zope 2.12.x and Zope 2.13.x. It allows an<br>
unauthenticated attacker to employ a carefully crafted web request<br>
to execute arbitrary commands with the privileges of the<br>
Zope/Plone service.<br>
<br>
*A patch will be available 2011-10-04, at 15:00 UTC.*<br>
<br>
Please carefully read h<br>
<goog_188554871>ttp://<a href="http://plone.org/products/plone/security/advisories/20110928" target="_blank">plone.<u></u>org/products/plone/security/<u></u>advisories/20110928</a><br></div>
<<a href="http://plone.org/products/plone/security/advisories/20110928" target="_blank">http://plone.org/products/<u></u>plone/security/advisories/<u></u>20110928</a>> for<div><br>
more details.<br>
<br>
*General questions**about this announcement*, Plone patching<br>
procedures, and availability of support may be addressed to<br>
thePlone support forums <<a href="http://plone.org/support" target="_blank">http://plone.org/support</a>>. If you<br>
have*specific questions*about this vulnerability or its handling,<br>
contact thePlone Security Team <mailto:<a href="mailto:security@plone.org" target="_blank">security@plone.org</a><br>
<mailto:<a href="mailto:security@plone.org" target="_blank">security@plone.org</a>>>.<br>
<br>
*To report potentially security-related issues**,*please send a<br>
mail to the Plone Security Team <a href="mailto:atsecurity@plone.org" target="_blank">atsecurity@plone.org</a><br></div>
<mailto:<a href="mailto:atsecurity@plone.org" target="_blank">atsecurity@plone.org</a>> <mailto:<a href="mailto:security@plone.org" target="_blank">security@plone.org</a><div><br>
<mailto:<a href="mailto:security@plone.org" target="_blank">security@plone.org</a>>>. The security team is always happy to<br>
credit individuals and companies who make responsible disclosures.<br>
<br>
<br>
______________________________<u></u>_________________<br>
Plone-IT mailing list<br></div>
<a href="mailto:Plone-IT@lists.plone.org" target="_blank">Plone-IT@lists.plone.org</a> <mailto:<a href="mailto:Plone-IT@lists.plone.org" target="_blank">Plone-IT@lists.plone.<u></u>org</a>><div><br>
<a href="https://lists.plone.org/mailman/listinfo/plone-plone-it" target="_blank">https://lists.plone.org/<u></u>mailman/listinfo/plone-plone-<u></u>it</a><br>
<a href="http://plone-regional-forums.221720.n2.nabble.com/Plone-Italy-f221721.html" target="_blank">http://plone-regional-forums.<u></u>221720.n2.nabble.com/Plone-<u></u>Italy-f221721.html</a><br>
<br>
<br>
<br>
<br>
-- <br>
Fabrizio<br>
--------------------<br>
"Life is what happens to you while you're busy making other plans" - J. Lennon<br>
<br>
“If you think education is expensive, try ignorance” - D. Bok<br>
<br>
Life is like a game of cards. The hand you are dealt is determinism; the way you play it is free will - Jawaharlal Nehru<br>
<br>
<br>
______________________________<u></u>_________________<br>
Plone-IT mailing list<br>
<a href="mailto:Plone-IT@lists.plone.org" target="_blank">Plone-IT@lists.plone.org</a><br>
<a href="https://lists.plone.org/mailman/listinfo/plone-plone-it" target="_blank">https://lists.plone.org/<u></u>mailman/listinfo/plone-plone-<u></u>it</a><br>
<a href="http://plone-regional-forums.221720.n2.nabble.com/Plone-Italy-f221721.html" target="_blank">http://plone-regional-forums.<u></u>221720.n2.nabble.com/Plone-<u></u>Italy-f221721.html</a><br>
</div></blockquote><div><div></div><div>
<br>
______________________________<u></u>_________________<br>
Plone-IT mailing list<br>
<a href="mailto:Plone-IT@lists.plone.org" target="_blank">Plone-IT@lists.plone.org</a><br>
<a href="https://lists.plone.org/mailman/listinfo/plone-plone-it" target="_blank">https://lists.plone.org/<u></u>mailman/listinfo/plone-plone-<u></u>it</a><br>
<a href="http://plone-regional-forums.221720.n2.nabble.com/Plone-Italy-f221721.html" target="_blank">http://plone-regional-forums.<u></u>221720.n2.nabble.com/Plone-<u></u>Italy-f221721.html</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Fabrizio<br>--------------------<br>"Life is what happens to you while you're busy making other plans" - J. Lennon<br><br>“If you think education is expensive, try ignorance” - D. Bok<div>
<br></div><div><span style="font-family:'lucida grande', tahoma, verdana, arial, sans-serif;line-height:14px">Life is like a game of cards. The hand you are dealt is determinism; the way you play it is free will - Jawaharlal Nehru</span></div>
<br>