Secunia Security Advisory – A vulnerability and a security issue have been reported in IPCop, which can be exploited by malicious people to cause a DoS (Denial of Service), and by malicious, local users to gain access to potentially sensitive information. 1) A vulnerability in Squid may be exploited by malicious people to cause a DoS. For more information: SA17271 2) The key used to encrypt web backup files is stored in /var/ipcop/backup/ and is world-readable. This can potentially be exploited by malicious users to decrypt backup files, or by the nobody user to overwrite arbitrary files by creating malicious backup files and restoring them. A race condition that can potentially allow the nobody user to replace the backup file before it is encrypted has also been fixed.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41455/sa17513.txt
Source: https://packetstormsecurity.com/files/41455/Secunia-Security-Advisory-17513.html