newsGNU GLOBAL - News: GLOBAL Security Advisory

 
 
Latest News
Integration of Doxygen and GLOBAL. posted by shigio, Mon May 16 12:59:19 2005 - 0 replies
GLOBAL-4.8.6 released. posted by shigio, Thu May 12 01:53:28 2005 - 0 replies
GLOBAL-4.8.5 released. posted by shigio, Tue Apr 19 00:38:33 2005 - 0 replies
GLOBAL-4.8.4 released. posted by shigio, Fri Mar 4 00:14:46 2005 - 0 replies
GLOBAL-4.8.3 released. posted by shigio, Sat Feb 26 04:34:13 2005 - 2 replies
[Submit News]
[18 news in archive]

GLOBAL Security Advisory

Item posted by Shigio YAMAGUCHI <shigio> on Sat Mar 30 17:34:18 2002.

Hello hackers,

A security hole was found in CGI program generaged by htags(1).
Please understand current situation and take a measures to meet
the situation.

[The versions which include security hole]

The following version include the security hole.

GLOBAL-3.5, 3.51, 3.52, 3.53, 3.54, 3.55, 4.0,
4.0.1, 4.1, 4.1.1, 4.2, 4.3, 4.3.1.

If you use above version and use the -f option of htags(1),
please stop publishing hypertext generated by htags(1) and
replace your GLOBAL with the fixed version 4.4.

[The contents of the security hole]

Almost commands are world-executable by form if you publish
the hypertext generated by htags with the -f option.

If you have some questions, please mail to me (shigio@gnu.org).
Thank you for your cooporation.

Comments:

No messages in GLOBAL Security Advisory

 

Back to the top


Powered by Savane 3.1-cleanup