geneweb 4.10 and previous versions does not properly check file permissions and content during conversion, which allows malicious users to modify arbitrary files.
Tim Dijkstra discovered a problem during the upgrade of geneweb, a
genealogy software with web interface The maintainer scripts
automatically converted files without checking their permissions and
content, which could lead to the modification of arbitrary files
For the stable distribution (woody) this problem has been fixed in
version 406-2woody ...
Vulmon