Campaign Sites Lack Security (especially *'s)

[PfcHammer]

Campaign Sites Lack Security
By Michelle Delio
Story location: http://www.wired.com/news/infostructure/0,1377,64036,00.html

02:00 AM Jun. 30, 2004 PT

George W. Bush and John Kerry may be tied in the polls, but Bush appears to be well ahead of Kerry in the number of security holes on his official campaign website.

On Sunday, security analyst Richard Smith did a quick check of the Bush and Kerry campaign sites and found several security problems on each, all of which are common on many other websites.

But after Smith posted a report of his findings to several security lists, others opted to do a deeper analysis and found some significant problems on Bush's website. One researcher used a commercial program called GFI LANguard to scan Bush's site. He said he found over 30 security faults. The researcher asked not to be identified because of concern that his scans could be construed as illegal under the Patriot Act. He submitted a digital copy of the results of the scan to Wired News.

According to the scan, the security problems on the Bush site include potential vulnerabilities that could conceivably allow a malicious attacker to gain remote control over the server, crash it, tamper with information on Web pages and compromise stored information.

[Moderator]

1. Duplicate

http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=102&topic_id=655590