Hosting Provided By

Webserver CVS (In)Security

From: <methodic(at)libpcap.net>
Date: Sun Mar 30 2003 - 16:42:02 EST

This is a weird one.. it's not a traditional advisory, and it's not a traditional paper.. but it's a topic that doesn't seem to be very well known. This affects _alot_ of people, in particular open source websites, which seem to use CVS to manage their content more than other people.

text/plain attachment: webserver_cvs_insecurity.txt

Received on Tue Apr 1 14:26:42 2003

This message: [ Message body ]
Next message: Jeremy Junginger: "Generating Hex Numbers to brute force rs_iis.c"
Previous message: Eric Hines: "Fate Research Labs Presents: Analysis of the NTDLL.DLL Exploit"
Next in thread: Brian Hatch: "Re: Webserver CVS (In)Security"
Reply: Brian Hatch: "Re: Webserver CVS (In)Security"
Reply: Crist J. Clark: "Re: Webserver CVS (In)Security"
Reply: Andrew Brown: "Re: Webserver CVS (In)Security"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:07:38 EDT