OpenX has released a security update to address a vulnerability in the 2.8 downloadable version of OpenX. Exploitation of this vulnerability may allow an attacker to compromise the integrity of the server running OpenX.
US-CERT encourages users and administrators to review the OpenX “Security Update” blog entry and upgrade to OpenX 6.8.7 to help mitigate the risks. OpenX users are also encouraged to review the “How to Secure your OpenX Installation” blog entry on how to further secure the OpenX installation.