Le mer 17/11/2004 à 01:51, Steve Kemp a écrit :
> Cookies or other authentification are not used on this CGI script so
> there are no immediately obvious security implications.
I agree. However, it should be fixed, even if not in a DSA.
Should I contact the package maintainer Uwe Hermann <uwe@xxxxxxxxxx> or
the main developper Roar Smith <lmdrsm@xxxxxxxxxxxxxxx> ?
Regards,
--
Nicolas Gregoire ----- Consultant en Sécurité des Systèmes d'Information
ngregoire@xxxxxxxxxxxx ------[ ExaProbe ]------ http://www.exaprobe.com/
PGP KeyID:CA61B44F FingerPrint:1CC647FF1A55664BA2D2AFDACA6A21DACA61B44F
|
