Hosting Provided By

Bug#453783: apache2: CVE-2007-4465

From: Paul Szabo <psz(at)maths.usyd.edu.au>
Date: Tue Dec 04 2007 - 17:10:40 EST

Dear Stefan,

> ... I think reporting it to the Firefox bugzilla would be a good idea.

Had done so:

>>> If it affects only one buggy browser, it's low impact. ...
>> If that buggy browser is IE ...

> ... I still do not think it is important enough for a security
> advisory.

So far I failed in producing an exploit for IE... even though that is expected/reported to be easy! (The Firefox bug "trumps" any fix you may make.)

Thanks,

Paul Szabo psz(at)maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia

-- 
To UNSUBSCRIBE, email to debian-apache-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Received on Tue Dec 4 19:21:00 2007

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 02:59:11 EDT