From owner-freebsd-security@FreeBSD.ORG  Wed Dec 29 20:51:14 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8436316A4D8
	for <freebsd-security@freebsd.org>;
	Wed, 29 Dec 2004 20:51:14 +0000 (GMT)
Received: from keylime.silverwraith.com (keylime.silverwraith.com
	[69.55.228.10])	by mx1.FreeBSD.org (Postfix) with ESMTP id 1136343D4C
	for <freebsd-security@freebsd.org>;
	Wed, 29 Dec 2004 20:51:14 +0000 (GMT)
	(envelope-from lists-freebsd@silverwraith.com)
Received: from keylime.silverwraith.com ([69.55.228.10])
	by keylime.silverwraith.com with esmtp (Exim 4.41 (FreeBSD))
	id 1Cjkmq-00034w-Hq; Wed, 29 Dec 2004 12:51:16 -0800
Received: (from avleen@localhost)iBTKpFVL011829;
	Wed, 29 Dec 2004 12:51:15 -0800 (PST)
	(envelope-from lists-freebsd@silverwraith.com)
X-Authentication-Warning: keylime.silverwraith.com: avleen set sender to
	lists-freebsd@silverwraith.com using -f
Date: Wed, 29 Dec 2004 12:51:15 -0800
From: Avleen Vig <lists-freebsd@silverwraith.com>
To: Julian Elischer <julian@elischer.org>,
	freebsd-security@freebsd.org
Message-ID: <20041229205115.GO21044@silverwraith.com>
References: <34657.24.230.37.14.1104187002.squirrel@24.230.37.14>
	<2990.24.98.86.57.1104197295.squirrel@24.98.86.57>
	<41D0C276.7080100@elischer.org> <xzpk6r1tdc2.fsf@dwp.des.no>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <xzpk6r1tdc2.fsf@dwp.des.no>
User-Agent: Mutt/1.5.6i
Subject: Re: Found security expliot in port phpBB 2.0.8  FreeBSD4.10
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 29 Dec 2004 20:51:14 -0000

> Julian Elischer <julian@elischer.org> writes:
> > might be a good idea if we "urged" users to update their phpbb  a bit
> > more vocally.

I was under the impression, that upgrading to PHP 4.3.10 would also fix
this, or was that a different issue?

-- 
Avleen Vig
Systems Administrator
Personal: www.silverwraith.com
EFnet:    irc.mindspring.com (Earthlink user access only)