Security Holes Discovered in judge_client of HUSTOJ

[GoogleCodeExporter]

The OpenJudge Alliance (http://openjudge.net) have recently conducted a 
security assessment of HUSTOJ. We are sorry to report that a series of design 
pitfalls and defects have been discovered in the judge_client core component of 
HUSTOJ, which can lead to severe security risks including 1) executing 
arbitrary binary code on the judge server, 2) leak of system information, 3) 
leak of test data, etc. 

The full text of the report is available online at 
http://openjudge.net/Report/201112A

Original issue reported on code.google.com by [email protected] on 8 Dec 2011 at 9:15