From owner-freebsd-ports  Wed Jul  4 17:51:11 2001
Delivered-To: freebsd-ports@freebsd.org
Received: from obsecurity.dyndns.org (adsl-63-207-60-93.dsl.lsan03.pacbell.net [63.207.60.93])
	by hub.freebsd.org (Postfix) with ESMTP id 654F337B403
	for <ports@FreeBSD.ORG>; Wed,  4 Jul 2001 17:51:09 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: by obsecurity.dyndns.org (Postfix, from userid 1000)
	id 44D2B66C4D; Wed,  4 Jul 2001 17:51:00 -0700 (PDT)
Date: Wed, 4 Jul 2001 17:50:56 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: 3APA3A <3APA3A@SECURITY.NNOV.RU>
Cc: ports@FreeBSD.ORG
Subject: Re: Fwd: UnZip 5.40 port directory traversal
Message-ID: <20010704175053.F59410@xor.obsecurity.org>
References: <12104282149.20010625174836@SECURITY.NNOV.RU>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="E7i4zwmWs5DOuDSH"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <12104282149.20010625174836@SECURITY.NNOV.RU>; from 3APA3A@SECURITY.NNOV.RU on Mon, Jun 25, 2001 at 05:48:36PM +0400
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org


--E7i4zwmWs5DOuDSH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

On Mon, Jun 25, 2001 at 05:48:36PM +0400, 3APA3A wrote:

> I  will  be  grateful  for  any  kind  of reply. SECURITY.NNOV follows
> RFPolicy http://www.wiretrip.net/rfp/policy.html

ports@FreeBSD.org is the wrong destination to send emails about
security holes in FreeBSD ports; the documented security contact
address is security-officer@FreeBSD.org.  It was only by accident I
discovered these emails.

Kris

--E7i4zwmWs5DOuDSH
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7Q7nsWry0BWjoQKURAp3WAKDiycyW6qEhzsLW/DZTpD6UpR/4jwCfYAgN
rWtNmKvZeandYu9AUf13JSo=
=gmd7
-----END PGP SIGNATURE-----

--E7i4zwmWs5DOuDSH--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message