Trustix installs the httpsd program for Apache-SSL with world-writeable permissions, which allows local users to replace it with a Trojan horse.Referenceshttp://www.securityfocus.com/bid/1575http://archives.neohapsis.com/archives/bugtraq/2000-08/0179.html
