Found security expliot in port phpBB 2.0.8 FreeBSD4.10

Kris Kennaway kris at obsecurity.org
Wed Dec 29 10:57:54 PST 2004


On Wed, Dec 29, 2004 at 01:53:32PM -0500, Peter C. Lai wrote:
> On Mon, Dec 27, 2004 at 06:18:30PM -0800, Julian Elischer wrote:
> > might be a good idea if we "urged" users to update their phpbb  a bit 
> > more vocally.
> 
> Or if someone had been vigilant enough to add a vuxml entry about it back
> in November. Waiting >30 days to update the database that portaudit uses
> is a bit longish, don't you think? The "urging" to which you refer is
> already one of the services provided by portaudit.

Remember that FreeBSD is supported by the community, so you also could
have submitted the update but didn't.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20041229/15bd1265/attachment.bin


More information about the freebsd-security mailing list