On Mon, 2004-11-29 at 09:02 +0200, Pekka Savola wrote:This has been superceded. There's a new bug out there allowing local code execution through SSI parsing, and I guess this update should include that as well...
Are you talking about this one?: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0940
If so, it's already included. If not, where can I get more info about the one you're talking about?
-- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings