We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message
80,259 News Articles

Fox News fault leaks sensitive content

Hacker finds hole in news website's server

Security analysts say a gaping security hole in Fox News Network's website revealed file directories and sensitive content, although it appears the problem has been fixed.

Several directories were visible on a server for Fox News that should normally not be accessible by a web browser over the internet.

A systems administrator may have forgotten that the directories were viewable over the internet or erroneously changed the permissions needed to view the directories, said Ronald van den Heetkamp, who runs the blog 'The Hacker Webzine'. The Fox News site runs on the Apache Web server software on Ubuntu Linux.

"This isn't a very clever idea," said van den Heetkamp. The security problem is "huge enough, and a few sensitive files have been found".

Also exposed was an FTP (File Transfer Protocol) connection to ziffdavis.com, plus a username and a password in a bash file, which is a Linux shell script used in this case to automatically log in into an FTP server and grab news headlines, van den Heetkamp said.

It would be hard to directly exploit the web server, but being able to see how the website is structured could open other ideas for an attack in the future, van den Heetkamp said.

"They will have tons of people downloading their data right now as we speak, which is bad in any case," he said.

Fox officials were not immediately available for comment.


IDG UK Sites

Best camera phone of 2015: iPhone 6 Plus vs LG G4 vs Galaxy S6 vs One M9 vs Nexus 6

IDG UK Sites

In defence of BlackBerrys

IDG UK Sites

Why we should reserve judgement on Apple ditching Helvetica in OS X/iOS for the Apple Watch's San...

IDG UK Sites

Retina 3.3GHz iMac 27in preview: Apple cuts £400 of price of Retina iMac with new model