Re: [SECURITY] [DSA-594-1] New Apache packages fix arbitrary code execution

2004-11-18 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > If I'm not mistaken the vulnerabilities existed in two files found in > apache-common. Does anybody know why the Vuln is classified as a remote exploit? Arent SSI tags dependend on local modifications? Or are there tags which can be remote exploited, if

Re: [SECURITY] [DSA-594-1] New Apache packages fix arbitrary code execution

2004-11-18 Thread Lupe Christoph
Quoting Steve Suehring <[EMAIL PROTECTED]>: > If I'm not mistaken the vulnerabilities existed in two files found in > apache-common. Since apache-common is a prerequisite for apache-ssl, > updating apache-common should correct the vulnerability. I could be > wrong and I'm sure someone will corre

Re: any DSA for CAN-2004-0930

2004-11-18 Thread Hideki Yamane
Hi Rolf, "Wed, 17 Nov 2004 11:35:01 +0100", "Rolf Kutz" "Re: any DSA for CAN-2004-0930" >> How about CAN-2004-0600 and CAN-2004-0686 for samba in stable? > >There is no Samba3 in stable. OK, I know that, stable version is Samba 2.2.3a based one, not 3.0.x. And upstream said all of suppo