Status Check: CVE CAN-2004-0002

[Syahrul Sazli Shaharir]

Hi,

Just want to ask about the status of this:-

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0002

>From list archives I gather the fix is still under refinement (but
committed (and removed?) in HEAD and RELENG_5_2).

One paranoid little shop is running a public web server on RELENG_4_9, and
contemplating this patch:-

http://marc.theaimsgroup.com/?l=freebsd-cvs-all&m=107358506010148&w=2

Before I go ahead, any new developments on this?

Thanks.

--sazli
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x270BD43E
Key fingerprint: 47F4 6E37 48D2 5FF1 8C67  A14F D7B5 05F8 270B D43E