Source Injection into PHPAddress

From: Chris Huebsch (chris.huebschat_private-chemnitz.de)
Date: Wed Jun 19 2002 - 06:37:54 PDT

Next message: Terry A Jeeves: "[RHSA-2002:103-13] Updated Apache packages fix chunked encoding issue"

Previous message: Stefan Esser: "Apache Exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello,

I am the author of PHPAddress.

On Sunday Tim Vandermeerch contacted me because a bug in PHPAddress.

5 Minutes later I took the download-site offline.

On Monday I completed the bugfix and put the download-site back online.

I also submitted a report to bugtraq (my user id is
securityfocusat_private-gemacht.de) and freeshmat.

Why do you broadcast the Bug-Report but not the Fix-Report?

I am really angry about that. It looks as if I do not take
error-reports seriously.



Chris
-- 
Chris Huebsch     www.huebsch-gemacht.de
TU Chemnitz, Str. d. Nationen 62, 1/B204
D-09107 Chemnitz  ---   +49 371 531 1377

Next message: Terry A Jeeves: "[RHSA-2002:103-13] Updated Apache packages fix chunked encoding issue"
Previous message: Stefan Esser: "Apache Exploit"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jun 20 2002 - 12:55:05 PDT