Subject: Re: CVS Vulnerability
To: None <hypno@sajberbettan.kennelsonline.net>
From: Daniel Carosone <dan@geek.com.au>
List: tech-security
Date: 01/21/2003 09:36:37
On Mon, Jan 20, 2003 at 10:58:02PM +0100, hypno@sajberbettan.kennelsonline.net wrote:
>
> http://security.e-matters.de/advisories/012003.html
>
> NetBSD CVS servers secure?
Yes. We were advised of the issue ahead of release and our servers
were patched, as were the in-tree sources. The construction of
our anoncvs servers is such that they wouldn't have been vulnerable
to any useful exploit anyway.
--
Dan.