Bug reports...

[Kevin Colby]

Seth Vidal wrote:
> >
> > It might be worth noting that bugzilla was just cited in
> > the recent Apache break-in.
> 
> it might also be worth noting that bugzilla was only citeable due to a
> dainbramaged mysql configuration - additionally a poorly organized www
> and ftp root dirs.
> 
> bugzilla has no inherent flaw if memory serves from the apache write-up
> - only a poor configuration issue.

Still, it's a lesson to learn from.  Be careful with this stuff.

	- Kevin Colby
	  kevinc at grainsystems.com