Re: A question about CVE-2014-8242

2015-05-11 Thread yhu2
wayne. Thanks your explanation, how about MD4 (rsync protocal <30)? any comment would be appreciated!! Thanks again. Yadi On 05/12/2015 05:19 AM, Wayne Davison wrote: On Mon, May 11, 2015 at 12:50 AM, yhu2 > wrote: whether or not CVE-2014-8242 affects rsy

Re: A question about CVE-2014-8242

2015-05-11 Thread yhu2
Thanks great!!!. Yadi On 05/12/2015 05:19 AM, Wayne Davison wrote: On Mon, May 11, 2015 at 12:50 AM, yhu2 > wrote: whether or not CVE-2014-8242 affects rsync? any commnet would be appreciated!! Yes. It would be extremely hard for someone to trigger th

Re: A question about CVE-2014-8242

2015-05-11 Thread Wayne Davison
On Mon, May 11, 2015 at 12:50 AM, yhu2 wrote: > whether or not CVE-2014-8242 affects rsync? any commnet would be > appreciated!! > Yes. It would be extremely hard for someone to trigger that via indirect means (such as inserting DB data and managing to match a checksum record boundary in conte

A question about CVE-2014-8242

2015-05-11 Thread yhu2
Hi,everyone here: whether or not CVE-2014-8242 affects rsync? any commnet would be appreciated!! Yadi -- Please use reply-all for most replies to avoid omitting the mailing list. To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.