bug-cvs
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security Breach Alert - CVS Home File Download Area Compromised


From: Larry Jones
Subject: Re: Security Breach Alert - CVS Home File Download Area Compromised
Date: Wed, 26 Jan 2005 18:00:35 -0500 (EST)

Mark D. Baushke writes:
> 
> When I got to the cvs-1.11.18-Darwin-7.7.0-powerpc.gz.sig link using
> 'w3m' (a text-based browser) it seems to have the wrong Content-Encoding
> (of 'gzip') for the .sig files in the macosx directory.

That makes sense -- it tries to automagically unzip the content, which
fails because the content isn't zipped, so you end up with a 0-length
file (or no file at all).  And probably no indication that anything went
wrong, since you wouldn't want to confuse the poor user with an error
message.

-Larry Jones

All girls should be shipped to Pluto--that's what I say. -- Calvin




reply via email to

[Prev in Thread] Current Thread [Next in Thread]