| To: | rPath Update Announcements <announce-noreply@rpath.com> |
|---|---|
| Subject: | Re: [Full-disclosure] rPSA-2007-0011-1 wget |
| From: | Ron DuFresne <dufresne@winternet.com> |
| Date: | Thu, 25 Jan 2007 11:55:11 -0600 (CST) |
| Cc: | security-announce@lists.rpath.com, <update-announce@lists.rpath.com>, <lwn@lwn.net>, <full-disclosure@lists.grok.org.uk>, <bugtraq@securityfocus.com> |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| In-reply-to: | <45b5cb0e.DtMPdmSbx/RaBBsh%announce-noreply@rpath.com> |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
[SNIP]
>
> Description:
> Previous versions of the wget package can crash if they contact a
> malicious FTP server. No further vulnerability is enabled by this
> minor flaw; system security is not threatened in any way.
>
Which might well be a good thing eh? Afterall, if the site is malicious,
better the app die and dump then allow one to prceed to inflict harm upon
ones self?
Thanks,
Ron DuFresne
--
"Sometimes you get the blues because your baby leaves you. Sometimes you get'em
'cause she comes back." --B.B. King
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | RubyGems 0.9.0 and earlier installation exploit, Eric Hodel |
|---|---|
| Next by Date: | [USN-410-2] teTeX vulnerability, Kees Cook |
| Previous by Thread: | rPSA-2007-0011-1 wget, rPath Update Announcements |
| Next by Thread: | [ MDKSA-2007:024 ] - Updated kdegraphics packages fix crafted pdf file vulnerability, security |
| Indexes: | [Date] [Thread] [Top] [All Lists] |