From owner-freebsd-security@FreeBSD.ORG Wed Dec 29 18:53:35 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DFDA716A4CE for ; Wed, 29 Dec 2004 18:53:35 +0000 (GMT) Received: from cowbert.2y.net (d46h180.public.uconn.edu [137.99.46.180]) by mx1.FreeBSD.org (Postfix) with SMTP id 5CCC943D41 for ; Wed, 29 Dec 2004 18:53:33 +0000 (GMT) (envelope-from sirmoo@cowbert.net) Received: (qmail 59438 invoked by uid 1001); 29 Dec 2004 18:53:32 -0000 Date: Wed, 29 Dec 2004 13:53:32 -0500 From: "Peter C. Lai" To: Julian Elischer Message-ID: <20041229185332.GL24545@cowbert.net> References: <34657.24.230.37.14.1104187002.squirrel@24.230.37.14> <2990.24.98.86.57.1104197295.squirrel@24.98.86.57> <41D0C276.7080100@elischer.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <41D0C276.7080100@elischer.org> User-Agent: Mutt/1.5.6i cc: freebsd-security@freebsd.org cc: estover@nativenerds.com Subject: Re: Found security expliot in port phpBB 2.0.8 FreeBSD4.10 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Dec 2004 18:53:36 -0000 On Mon, Dec 27, 2004 at 06:18:30PM -0800, Julian Elischer wrote: > might be a good idea if we "urged" users to update their phpbb a bit > more vocally. Or if someone had been vigilant enough to add a vuxml entry about it back in November. Waiting >30 days to update the database that portaudit uses is a bit longish, don't you think? The "urging" to which you refer is already one of the services provided by portaudit. -- Peter C. Lai University of Connecticut Dept. of Molecular and Cell Biology Yale University School of Medicine SenseLab | Research Assistant http://cowbert.2y.net/