Topic: HAMweather security update

[weatherforyou]

If you're a user of the HAMweather scripts this is important to you...

This is to inform you about a HAMweather3 security issue and available patch.  This afternoon HAMweather, LLC was notified of a security issue that could allow remote code execution via the HAMweather scripts. The security issue was found by James of GulfTech Security Research:  http://www.gulftech.org/   Within a couple of hours after the security report, we released a patch for all versions to correct the issue. It is highly recommended that you update your HAMweather installation immediately. You may download the Security patch for your HAMweather 3 version via the links below:

HW3php: http://www.hamweather.net/downloads/hw3/hw3php/hw3php_securityfix_20060929.zip
HW3perl: http://www.hamweather.net/downloads/hw3/hw3perl/hw3perl_securityfix_20060929.zip
HW3asp: http://www.hamweather.net/downloads/hw3/hw3asp/hw3asp_securityfix_20060929.zip

We have also released new full distributions which include the security update. They are available via the downloads page: http://www.hamweather.com/hw3/hw3perl/download.shtml  For additional assistance please visit the support forum thread on this topic: http://support.hamweather.com/viewtopic.php?t=6548  HAMweather, LLC takes security seriously and is committed to ensure that the HAMweather software is an excellent product.

HAMweather Support Team