[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Eterm & others allow arbitrary commands execution via escape sequencies [Was: CAN-2003-0020?]



On Mon, Apr 19, 2004 at 07:51:27PM +0200, Jan Minar wrote:

> Come on, Matt:  Virtually all terminal emulators are vulnerable, and the
> vulnerability is a common knowledge.  The abovementioned paper was on
> Bugtraq 2003-02-24 21:02:52...  Is the Security Team going to do
> something about it themselves (filing RC bugs at least)?

You are part of a community, not somebody purchasing a service.  Take some
initiative and contribute.

The security team does not have the resources to audit Debian, and can
barely keep up with new issues as they become known.  Pointing and whining
doesn't help.

-- 
 - mdz



Reply to: