newsGNU GLOBAL - News: GLOBAL Security Advisory

 
 
Latest News
Integration of Doxygen and GLOBAL. posted by shigio, Mon May 16 12:59:19 2005 - 0 replies
GLOBAL-4.8.6 released. posted by shigio, Thu May 12 01:53:28 2005 - 0 replies
GLOBAL-4.8.5 released. posted by shigio, Tue Apr 19 00:38:33 2005 - 0 replies
GLOBAL-4.8.4 released. posted by shigio, Fri Mar 4 00:14:46 2005 - 0 replies
GLOBAL-4.8.3 released. posted by shigio, Sat Feb 26 04:34:13 2005 - 2 replies
[Submit News]
[18 news in archive]

GLOBAL Security Advisory

Item posted by Shigio YAMAGUCHI <shigio> on Thu Jun 5 04:15:05 2003.

Hello hackers,

A security hole was found in CGI program generaged by htags(1).
Please understand current situation and take a measures to meet
the situation.

[The versions which include security hole]

The following version include the security hole.

GLOBAL-4.4, 4.5, 4.5.1, 4.5.2

If you use above version and use the -f option of htags(1) with the
grep or idutils search function effective, please stop publishing
hypertext generated by htags(1), replace your GLOBAL with the fixed
version 4.5.3 and regenerate hypertext before publishing.

[The contents of the security hole]

Almost commands are world-executable by form if you publish
the hypertext generated by htags using the -f option and with
the configuration variable enable_grep or enable_idutils
specified.

If you have some questions, please mail to me (shigio@gnu.org).
Thank you for your cooporation.

Comments:

No messages in GLOBAL Security Advisory

 

Back to the top


Powered by Savane 3.1-cleanup