apache and CAN-2003-0020

[Geoff Crompton]

CAN-2003-0020 is a vulnerability in apache that mentions how apache 
allows escape sequences into the error logs, which might exploit a 
terminal program viewing them.
More detail is at http://www.securityfocus.com/bid/9930. The 
securityfocus page lists Debian as being vulnerable, and I can't find a 
DSA that corresponds to CAN-2003-0020.

Does anyone know if Debian is vulnerable or fixed?
--
Geoff Crompton
Debian System Administrator
Strategic Data
+61 3 9340 9000
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]