Fox News server found unsecured

Security analysts spotted a gaping security hole in Fox News' Web site on Monday

Security analysts spotted a gaping security hole in Fox News Network's Web site on Monday, revealing file directories and sensitive content, although it appears the problem has been fixed.

Several directories were visible on a server for Fox News that should normally not be accessible by a Web browser over the Internet.

A systems administrator may have forgotten that the directories were viewable over the Internet or erroneously changed the permissions needed to view the directories, said Ronald van den Heetkamp, who runs the blog "The Hacker Webzine." The Fox News site runs on the Apache Web server software on Ubuntu Linux.

"This isn't a very clever idea," wrote van den Heetkamp, in an e-mail to IDG News Service. The security problem is "huge enough, and a few sensitive files have been found."

Also exposed was an FTP (File Transfer Protocol) connection to ziffdavis.com, plus a username and a password in a bash file, which is a Linux shell script used in this case to automatically login into an FTP server and grab news headlines, van den Heetkamp said.

It would be hard to directly exploit the Web server, but being able to see how the Web site is structured could open other ideas for an attack in the future, van den Heetkamp said.

"They will have tons of people downloading their data right now as we speak, which is bad in any case," he said.

Fox officials were not immediately available for comment.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Brand Post

Shining a light on creativity

MSI has long pushed the boundaries of invention with its ever-evolving range of laptops but it has now pulled off a world first with the new MSI Creative 17.

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?