newsGNU GLOBAL - News: GLOBAL Security Advisory

 
 
Latest News
Integration of Doxygen and GLOBAL. posted by shigio, Mon 16 May 2005 12:59:19 PM UTC
GLOBAL-4.8.6 released. posted by shigio, Thu 12 May 2005 01:53:28 AM UTC
GLOBAL-4.8.5 released. posted by shigio, Tue 19 Apr 2005 12:38:33 AM UTC
GLOBAL-4.8.4 released. posted by shigio, Fri 04 Mar 2005 12:14:46 AM UTC
GLOBAL-4.8.3 released. posted by shigio, Sat 26 Feb 2005 04:34:13 AM UTC - 2 replies

GLOBAL Security Advisory

Item posted by Shigio YAMAGUCHI <shigio> on Thu 05 Jun 2003 04:15:05 AM UTC.

Hello hackers,

A security hole was found in CGI program generaged by htags(1).
Please understand current situation and take a measures to meet
the situation.

[The versions which include security hole]

        The following version include the security hole.

        GLOBAL-4.4, 4.5, 4.5.1, 4.5.2

If you use above version and use the -f option of htags(1) with the
grep or idutils search function effective, please stop publishing
hypertext generated by htags(1), replace your GLOBAL with the fixed
version 4.5.3 and regenerate hypertext before publishing.

[The contents of the security hole]

        Almost commands are world-executable by form if you publish
        the hypertext generated by htags using the -f option and with
        the configuration variable enable_grep or enable_idutils
        specified.

If you have some questions, please mail to me (shigio@gnu.org).
Thank you for your cooporation.

 

Back to the top

Powered by Savane 3.13-3230.
Corresponding source code