News for hackers. Stuff that matters.
Re:Only two remote holes in the default install, in more tha... by there on Thursday August 21, 2008 @11:37AM (#282773)
oh no, a lame xss bug in a 3rd party cgi script that runs on a solaris web server hosting a website that uses no cookies. surely this is big news!
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by shadytrees on Thursday August 21, 2008 @12:09PM (#282810)
You have achieved the difficult task of making CVS less usable.
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by dguido on Thursday August 21, 2008 @01:34PM (#282911)
This was posted on full-disclosure August 6th.

http://seclists.org/fulldisclosure/2008/Aug/0074.html

[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by gstar on Thursday August 21, 2008 @10:52AM (#282725)
I cant decide if that's classy or cheeky.

But regardless, I dont know if a bug in cvsweb counts as openbsd - does it?

[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by silentbicycle on Thursday August 21, 2008 @12:50PM (#282859)
Not when cvsweb is running on Solaris.
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by garrydanger on Thursday August 21, 2008 @09:03PM (#283354)
why run solaris at all when there is only 2 remote holes in the default install of openbsd?
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by silentbicycle on Thursday August 21, 2008 @10:02PM (#283391)
Probably because when somebody donates tons of space and bandwidth to you, it's rude to argue with them over their choice of OS.

http://openbsd.org/faq/faq8.html#wwwsolaris

[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by stassats on Thursday August 21, 2008 @10:24AM (#282699)
Is that a hole? Is that a default install?
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by gopher on Thursday August 21, 2008 @11:02AM (#282739)
A security hole? Indeed. In the default install? No, but anyways, those are the security guys and I feel this was funny:-)
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by silentbicycle on Thursday August 21, 2008 @12:49PM (#282858)
Not on OpenBSD at all. That's Solaris. (http://openbsd.org/faq/faq8.html#wwwsolaris)
[ Parent | on HN ]
Re:Only two remote holes in the default install, in more tha... by tptacek on Thursday August 21, 2008 @12:11PM (#282812)
OH NOEZ! U G0TZ MY CVSWEB COOKEEZ!
[ Parent | on HN ]