[horde] Phising despite latest CVS?

[Michael M Slusarz]

Quoting Jan Johansson <j2 at mupp.net>:

>> The attacker has probably already installed a backdoor before you
>> upgraded and is installing the file through that.
>
> Ok, this is probably not correct? Is cgi.php even a Horde-file in its
> _original_ form?
>
> scooter:~# less
> /var/www/webmail.skyddsrummet.net/horde/services/help/cgi.php
> closedir($dir_handle);

No.

michael

___________________________________
Michael Slusarz [slusarz at horde.org]